Cryptomining
IP addresses and domains of cryptocurrency mining pools and related mining infrastructure (stratum servers, pool proxies, browser mining scripts). Connections from corporate assets usually reveal cryptojacking malware or unauthorized miners consuming company resources. Mining pools are not always malicious by themselves, so whitelisted infrastructure is excluded and the feed is best used to detect unexpected mining activity inside the network.
- Author
- davidgil
- Created
- 2026-11-03 14:24:03
- Last updated
- 2026-11-03 14:24:41
- Downloads
- 22
- Hostname indicators
- 624
Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.