hestat / minerchk Goto Github PK

You might want to take a look at this project on Gitlab for a larger list
https://gitlab.com/ZeroDot1/CoinBlockerLists/issues/1

Also, in your post : https://laskowski-tech.com/resources/web-server-malware-investigating/
Note that Gravity has been closed. Could suggest sucuri scan instead.

Have a look at the CoinBlockerLists, you can find more pools inside.
https://github.com/ZeroDot1/CoinBlockerLists
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/hosts

For minerlist.txt and minerlist-all.txt, would you consider adding a "#" before the IPs?

This would allow for pfBlockerNG to parse these feeds and collect the Domains names and consider the IP as a comment as that format would follow most other domain based feed format.

Would you also consider adding a new IP feed for these IPs?

Also noticed the hostlist.txt has "xmr-eu1[.]nanopool[.]org" but the "minerlist-all"
has only "xmr-eu[.]nanopool[.]org"? Was just an observation.

Thanks for providing these Feeds!