>samit_hota
Back to IOCs
G01063 indicators

XMRIG — Indicators of Compromise

Samit Hota·
#ioc#xmrig

Overview

Indicators of compromise associated with XMRIG. 3 indicators listed below, linked to the G0106 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
ip:port175.119.7.220:81July 28, 202680%
ip:port216.9.226.82:80July 28, 2026100%
ip:port194.116.236.129:80July 28, 2026100%

Related content

Adversary Profile

Rocke (G0106): Evolution of a Persistent Cryptojacking Adversary

Adversary Profile

Blue Mockingbird (G0108): Persistent Cryptomining Threat

Adversary Profile

Threat Actor Profile: TeamTNT (G0139)

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call