{ "aliases": [], "attack_id": null, "attack_name": null, "attack_url": null, "counts": { "ipv4": 48, "url": 48 }, "first_seen": { "ipv4": { "146.70.117.210:443": "2024-06-15", "146.70.117.56:443": "2024-06-15", "146.70.119.24:443": "2024-06-15", "146.70.124.216:443": "2024-06-15", "146.70.165.227:443": "2024-06-15", "146.70.166.176:443": "2024-06-15", "146.70.171.112:443": "2024-06-15", "146.70.171.99:443": "2024-06-15", "154.47.30.137:443": "2024-06-15", "154.47.30.150:443": "2024-06-15", "162.33.177.32:443": "2024-06-15", "169.150.201.25:443": "2024-06-15", "173.44.63.112:443": "2024-06-15", "176.123.3.132:443": "2024-06-15", "176.123.6.193:443": "2024-06-15", "176.220.186.152:443": "2024-06-15", "184.147.100.29:443": "2024-06-15", "185.156.46.163:443": "2024-06-15", "185.213.155.241:443": "2024-06-15", "185.248.85.14:443": "2024-06-15", "185.248.85.59:443": "2024-06-15", "192.252.212.60:443": "2024-06-15", "193.32.126.233:443": "2024-06-15", "194.230.144.126:443": "2024-06-15", "194.230.144.50:443": "2024-06-15", "194.230.145.67:443": "2024-06-15", "194.230.145.76:443": "2024-06-15", "194.230.147.127:443": "2024-06-15", "194.230.148.99:443": "2024-06-15", "194.230.158.107:443": "2024-06-15", "194.230.158.178:443": "2024-06-15", "194.230.160.237:443": "2024-06-15", "194.230.160.5:443": "2024-06-15", "198.44.136.56:443": "2024-06-15", "198.44.136.82:443": "2024-06-15", "198.54.130.153:443": "2024-06-15", "198.54.131.152:443": "2024-06-15", "206.217.205.49:443": "2024-06-15", "37.19.210.21:443": "2024-06-15", "45.134.142.200:443": "2024-06-15", "45.27.26.205:443": "2024-06-15", "45.86.221.146:443": "2024-06-15", "5.47.87.202:443": "2024-06-15", "66.115.189.247:443": "2024-06-15", "79.127.217.44:443": "2024-06-15", "87.249.134.11:443": "2024-06-15", "93.115.0.49:443": "2024-06-15", "96.44.191.140:443": "2024-06-15" }, "url": { "http://146.70.117.210": "2024-06-15", "http://146.70.117.56": "2024-06-15", "http://146.70.119.24": "2024-06-15", "http://146.70.124.216": "2024-06-15", "http://146.70.165.227": "2024-06-15", "http://146.70.166.176": "2024-06-15", "http://146.70.171.112": "2024-06-15", "http://146.70.171.99": "2024-06-15", "http://154.47.30.137": "2024-06-15", "http://154.47.30.150": "2024-06-15", "http://162.33.177.32": "2024-06-15", "http://169.150.201.25": "2024-06-15", "http://173.44.63.112": "2024-06-15", "http://176.123.3.132": "2024-06-15", "http://176.123.6.193": "2024-06-15", "http://176.220.186.152": "2024-06-15", "http://184.147.100.29": "2024-06-15", "http://185.156.46.163": "2024-06-15", "http://185.213.155.241": "2024-06-15", "http://185.248.85.14": "2024-06-15", "http://185.248.85.59": "2024-06-15", "http://192.252.212.60": "2024-06-15", "http://193.32.126.233": "2024-06-15", "http://194.230.144.126": "2024-06-15", "http://194.230.144.50": "2024-06-15", "http://194.230.145.67": "2024-06-15", "http://194.230.145.76": "2024-06-15", "http://194.230.147.127": "2024-06-15", "http://194.230.148.99": "2024-06-15", "http://194.230.158.107": "2024-06-15", "http://194.230.158.178": "2024-06-15", "http://194.230.160.237": "2024-06-15", "http://194.230.160.5": "2024-06-15", "http://198.44.136.56": "2024-06-15", "http://198.44.136.82": "2024-06-15", "http://198.54.130.153": "2024-06-15", "http://198.54.131.152": "2024-06-15", "http://206.217.205.49": "2024-06-15", "http://37.19.210.21": "2024-06-15", "http://45.134.142.200": "2024-06-15", "http://45.27.26.205": "2024-06-15", "http://45.86.221.146": "2024-06-15", "http://5.47.87.202": "2024-06-15", "http://66.115.189.247": "2024-06-15", "http://79.127.217.44": "2024-06-15", "http://87.249.134.11": "2024-06-15", "http://93.115.0.49": "2024-06-15", "http://96.44.191.140": "2024-06-15" } }, "first_seen_precision": { "ipv4": {}, "url": {} }, "first_seen_range": { "earliest": "2024-06-15", "latest": "2024-06-15" }, "generated_at": "2026-08-08T03:26:30+00:00", "indicators": { "ipv4": [ "146.70.117.210:443", "146.70.117.56:443", "146.70.119.24:443", "146.70.124.216:443", "146.70.165.227:443", "146.70.166.176:443", "146.70.171.112:443", "146.70.171.99:443", "154.47.30.137:443", "154.47.30.150:443", "162.33.177.32:443", "169.150.201.25:443", "173.44.63.112:443", "176.123.3.132:443", "176.123.6.193:443", "176.220.186.152:443", "184.147.100.29:443", "185.156.46.163:443", "185.213.155.241:443", "185.248.85.14:443", "185.248.85.59:443", "192.252.212.60:443", "193.32.126.233:443", "194.230.144.126:443", "194.230.144.50:443", "194.230.145.67:443", "194.230.145.76:443", "194.230.147.127:443", "194.230.148.99:443", "194.230.158.107:443", "194.230.158.178:443", "194.230.160.237:443", "194.230.160.5:443", "198.44.136.56:443", "198.44.136.82:443", "198.54.130.153:443", "198.54.131.152:443", "206.217.205.49:443", "37.19.210.21:443", "45.134.142.200:443", "45.27.26.205:443", "45.86.221.146:443", "5.47.87.202:443", "66.115.189.247:443", "79.127.217.44:443", "87.249.134.11:443", "93.115.0.49:443", "96.44.191.140:443" ], "url": [ "http://146.70.117.210", "http://146.70.117.56", "http://146.70.119.24", "http://146.70.124.216", "http://146.70.165.227", "http://146.70.166.176", "http://146.70.171.112", "http://146.70.171.99", "http://154.47.30.137", "http://154.47.30.150", "http://162.33.177.32", "http://169.150.201.25", "http://173.44.63.112", "http://176.123.3.132", "http://176.123.6.193", "http://176.220.186.152", "http://184.147.100.29", "http://185.156.46.163", "http://185.213.155.241", "http://185.248.85.14", "http://185.248.85.59", "http://192.252.212.60", "http://193.32.126.233", "http://194.230.144.126", "http://194.230.144.50", "http://194.230.145.67", "http://194.230.145.76", "http://194.230.147.127", "http://194.230.148.99", "http://194.230.158.107", "http://194.230.158.178", "http://194.230.160.237", "http://194.230.160.5", "http://198.44.136.56", "http://198.44.136.82", "http://198.54.130.153", "http://198.54.131.152", "http://206.217.205.49", "http://37.19.210.21", "http://45.134.142.200", "http://45.27.26.205", "http://45.86.221.146", "http://5.47.87.202", "http://66.115.189.247", "http://79.127.217.44", "http://87.249.134.11", "http://93.115.0.49", "http://96.44.191.140" ] }, "last_modified": "2026-01-02T23:10:15+00:00", "maltrail_groups": [ "UNC5537" ], "references": [ "https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion", "https://otx.alienvault.com/pulse/666979aec22f2fa003a8737b" ], "related": [], "slug": "UNC5537", "timeline": [ { "counts": { "ipv4": 48, "url": 48 }, "first_seen": "2024-06-15", "indicators": { "ipv4": [ "146.70.117.210:443", "146.70.117.56:443", "146.70.119.24:443", "146.70.124.216:443", "146.70.165.227:443", "146.70.166.176:443", "146.70.171.112:443", "146.70.171.99:443", "154.47.30.137:443", "154.47.30.150:443", "162.33.177.32:443", "169.150.201.25:443", "173.44.63.112:443", "176.123.3.132:443", "176.123.6.193:443", "176.220.186.152:443", "184.147.100.29:443", "185.156.46.163:443", "185.213.155.241:443", "185.248.85.14:443", "185.248.85.59:443", "192.252.212.60:443", "193.32.126.233:443", "194.230.144.126:443", "194.230.144.50:443", "194.230.145.67:443", "194.230.145.76:443", "194.230.147.127:443", "194.230.148.99:443", "194.230.158.107:443", "194.230.158.178:443", "194.230.160.237:443", "194.230.160.5:443", "198.44.136.56:443", "198.44.136.82:443", "198.54.130.153:443", "198.54.131.152:443", "206.217.205.49:443", "37.19.210.21:443", "45.134.142.200:443", "45.27.26.205:443", "45.86.221.146:443", "5.47.87.202:443", "66.115.189.247:443", "79.127.217.44:443", "87.249.134.11:443", "93.115.0.49:443", "96.44.191.140:443" ], "url": [ "http://146.70.117.210", "http://146.70.117.56", "http://146.70.119.24", "http://146.70.124.216", "http://146.70.165.227", "http://146.70.166.176", "http://146.70.171.112", "http://146.70.171.99", "http://154.47.30.137", "http://154.47.30.150", "http://162.33.177.32", "http://169.150.201.25", "http://173.44.63.112", "http://176.123.3.132", "http://176.123.6.193", "http://176.220.186.152", "http://184.147.100.29", "http://185.156.46.163", "http://185.213.155.241", "http://185.248.85.14", "http://185.248.85.59", "http://192.252.212.60", "http://193.32.126.233", "http://194.230.144.126", "http://194.230.144.50", "http://194.230.145.67", "http://194.230.145.76", "http://194.230.147.127", "http://194.230.148.99", "http://194.230.158.107", "http://194.230.158.178", "http://194.230.160.237", "http://194.230.160.5", "http://198.44.136.56", "http://198.44.136.82", "http://198.54.130.153", "http://198.54.131.152", "http://206.217.205.49", "http://37.19.210.21", "http://45.134.142.200", "http://45.27.26.205", "http://45.86.221.146", "http://5.47.87.202", "http://66.115.189.247", "http://79.127.217.44", "http://87.249.134.11", "http://93.115.0.49", "http://96.44.191.140" ] }, "precision": "exact", "references": [ "https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion", "https://otx.alienvault.com/pulse/666979aec22f2fa003a8737b" ], "total": 96 } ] }