UNC215

Overview 18 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 18mandiant.com/resources/unc215-chinese-espionage-camp…
• 18otx.alienvault.com/pulse/611232c3f696e5681585549a

Related groups 1

What the sources have in common — not a claim that these are the same actor. See the whole graph.

• Threat Group-3390 G0027
  3 shared indicators

Timeline 18 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2022-01-08 6 ipv4, 9 url4 yrs ago

   mandiant.com/resources/unc215-chinese-espionage-camp… · otx.alienvault.com/pulse/611232c3f696e5681585549a

   ipv4	103.59.144.183:443
   ipv4	103.79.78.48:443
   ipv4	139.59.81.253:443
   ipv4	141.164.52.232:443
   ipv4	159.89.168.83:443
   ipv4	34.65.151.250:443
   url	http://103.59.144.183
   url	http://103.79.78.48
   url	http://139.59.81.253
   url	http://141.164.52.232
   url	http://159.89.168.83
   url	http://34.65.151.250
   url	http://47.75.49.32
   url	http://85.204.74.143
   url	http://89.35.178.105

   copy batch

2. 2021-04-11 3 ipv45 yrs ago

   mandiant.com/resources/unc215-chinese-espionage-camp… · otx.alienvault.com/pulse/611232c3f696e5681585549a

   47.75.49.32:443

   85.204.74.143:443

   89.35.178.105:443

   copy batch

Further reading 2

• mandiant.com/resources/unc215-chinese-espionage-camp…
• otx.alienvault.com/pulse/611232c3f696e5681585549a