Bitcoin Mining Detection

[NogBadTheBad]

It might just be a matter of enabling the bitcoin rules in snort_app-detect.rules.

Also you might want to blacklist these servers https://github.com/ZeroDot1/CoinBlockerLists/blob/master/MiningServerIPList.txt

[nhTlr6]

I'm sorry for posting here but I'm looking for this new patch, did you find anything like that?

[nhTlr6]

This post is deleted!

[Ace864]

@NogBadTheBad thank you for helping. You actually solved my issue.

[nbctcp]

@NogBadTheBad
link dead

[kiokoman]

google is your best friend !

“This list contains all domains - A list for administrators to prevent mining in networks” - https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/list.txt?inline=false
“This list contains all optional domains - An additional list for administrators” - https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/list_optional.txt?inline=false
“This list contains all browser mining domains - A list to prevent browser mining only” - https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/list_browser.txt?inline=false
“This list contains all IPs - A additional list for administrators to prevent mining in networks” - https://gitlab.com/ZeroDot1/CoinBlockerLists/raw/master/MiningServerIPList.txt?inline=false

[nbctcp]

This post is deleted!

[kiokoman]

https://zerodot1.gitlab.io/CoinBlockerLists/hosts

https://github.com/MISP/MISP/pull/5553

[AKEGEC]

Hi all, did it solved the issue?

@NogBadTheBad said in Bitcoin Mining Detection:

It might just be a matter of enabling the bitcoin rules in snort_app-detect.rules.

Also you might want to blacklist these servers https://github.com/ZeroDot1/CoinBlockerLists/blob/master/MiningServerIPList.txt

[Ace864]

@nbctcp That's veird that the link is dead. I worked for me a couple of days ago.

[Ace864]

This post is deleted!

[stephenw10]

Locking this. It's just attracting spam at a ridiculous rate.