Analysis of CoinMiner Attacks Targeting Web Servers

45.147.51.78

192.210.206.76

141.11.89.42

14.19.214.36

1.119.3.28

45.130.22.219

http://smtp.wptask.cyou:465

http://sky.wptask.cyou:9999

http://sinmaxinter.top:7005

http://sinmaxinter.top:7001/C3-server25.zip:

http://sinmaxinter.top:7001/services.zip:

http://pop3.wptask.cyou:995

http://info.perflogs.top:995

http://c3.wptask.cyou:33333

http://auto.skypool.xyz:9999

http://auto.c3pool.org:33333

http://45.147.51.78:995

http://45.147.51.78:465

http://45.130.22.219:995

http://45.130.22.219:465

http://45.130.22.219/aspx.exe:

http://192.210.206.76/sRDI.dat:

http://141.11.89.42:995

http://141.11.89.42:8443

http://141.11.89.42:465

http://14.19.214.36/fscan.exe:

http://14.19.214.36:6666/pp.exe:

http://14.19.214.36/ew.exe:

http://14.19.214.36/aa.aspx:

http://14.19.214.36/RingQ.exe:

http://14.19.214.36/11.exe:

T1543.003

T1135

T1053.005

T1136

T1059.001

T1087

T1070

T1106

T1082

T1071

T1543

T1055

T1569

T1027

T1053

T1562

T1190

T1072

T1059

CVE-2021-1732