UNC5537

Overview 96 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 96cloud.google.com/blog/topics/threat-intelligence/unc5537…
• 96otx.alienvault.com/pulse/666979aec22f2fa003a8737b

Timeline 96 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2024-06-15 48 ipv4, 48 url2 yrs ago

   cloud.google.com/blog/topics/threat-intelligence/unc5537… · otx.alienvault.com/pulse/666979aec22f2fa003a8737b

   ipv4	146.70.117.210:443
   ipv4	146.70.117.56:443
   ipv4	146.70.119.24:443
   ipv4	146.70.124.216:443
   ipv4	146.70.165.227:443
   ipv4	146.70.166.176:443
   ipv4	146.70.171.112:443
   ipv4	146.70.171.99:443
   ipv4	154.47.30.137:443
   ipv4	154.47.30.150:443
   ipv4	162.33.177.32:443
   ipv4	169.150.201.25:443
   ipv4	173.44.63.112:443
   ipv4	176.123.3.132:443
   ipv4	176.123.6.193:443
   ipv4	176.220.186.152:443
   ipv4	184.147.100.29:443
   ipv4	185.156.46.163:443
   ipv4	185.213.155.241:443
   ipv4	185.248.85.14:443
   ipv4	185.248.85.59:443
   ipv4	192.252.212.60:443
   ipv4	193.32.126.233:443
   ipv4	194.230.144.126:443
   ipv4	194.230.144.50:443
   ipv4	194.230.145.67:443
   ipv4	194.230.145.76:443
   ipv4	194.230.147.127:443
   ipv4	194.230.148.99:443
   ipv4	194.230.158.107:443
   ipv4	194.230.158.178:443
   ipv4	194.230.160.237:443
   ipv4	194.230.160.5:443
   ipv4	198.44.136.56:443
   ipv4	198.44.136.82:443
   ipv4	198.54.130.153:443
   ipv4	198.54.131.152:443
   ipv4	206.217.205.49:443
   ipv4	37.19.210.21:443
   ipv4	45.134.142.200:443
   ipv4	45.27.26.205:443
   ipv4	45.86.221.146:443
   ipv4	5.47.87.202:443
   ipv4	66.115.189.247:443
   ipv4	79.127.217.44:443
   ipv4	87.249.134.11:443
   ipv4	93.115.0.49:443
   ipv4	96.44.191.140:443
   url	http://146.70.117.210
   url	http://146.70.117.56
   url	http://146.70.119.24
   url	http://146.70.124.216
   url	http://146.70.165.227
   url	http://146.70.166.176
   url	http://146.70.171.112
   url	http://146.70.171.99
   url	http://154.47.30.137
   url	http://154.47.30.150
   url	http://162.33.177.32
   url	http://169.150.201.25
   url	http://173.44.63.112
   url	http://176.123.3.132
   url	http://176.123.6.193
   url	http://176.220.186.152
   url	http://184.147.100.29
   url	http://185.156.46.163
   url	http://185.213.155.241
   url	http://185.248.85.14
   url	http://185.248.85.59
   url	http://192.252.212.60
   url	http://193.32.126.233
   url	http://194.230.144.126
   url	http://194.230.144.50
   url	http://194.230.145.67
   url	http://194.230.145.76
   url	http://194.230.147.127
   url	http://194.230.148.99
   url	http://194.230.158.107
   url	http://194.230.158.178
   url	http://194.230.160.237
   url	http://194.230.160.5
   url	http://198.44.136.56
   url	http://198.44.136.82
   url	http://198.54.130.153
   url	http://198.54.131.152
   url	http://206.217.205.49
   url	http://37.19.210.21
   url	http://45.134.142.200
   url	http://45.27.26.205
   url	http://45.86.221.146
   url	http://5.47.87.202
   url	http://66.115.189.247
   url	http://79.127.217.44
   url	http://87.249.134.11
   url	http://93.115.0.49
   url	http://96.44.191.140

   copy batch

Further reading 2

• cloud.google.com/blog/topics/threat-intelligence/unc5537…
• otx.alienvault.com/pulse/666979aec22f2fa003a8737b