[et_pb_section fb_built=”1″ _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_row column_structure=”2_5,3_5″ _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”2_5″ _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
Malware that deploys crypto mining software has become more and more popular and annoying. It’s not always possible to scan every device in your network with our free or commercial compromise assessment scanners.<\/p>\n
The good news is that the mining pools for the most popular crypto currency Monero (Symbol: XMR) are limited.<\/p>\n
Therefore we’ve decided to compile a list of these mining pools that you can use to monitor your firewall or DNS servers.<\/p>\n
For a very generic approach, your could try using the following patterns:<\/p>\n
*xmr.*
*pool.com
*pool.org
pool.*<\/p>\n
Our customers can use THOR to scan for scripts, executables, DNS cache, process connections, log entries and other elements for traces of crypto mining activity.<\/p>\n
[\/et_pb_text][\/et_pb_column][et_pb_column type=”3_5″ _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/www.nextron-systems.com\/wp-content\/uploads\/2021\/10\/Screenshot-2021-10-24-at-10.54.07.png” title_text=”Screenshot 2021-10-24 at 10.54.07″ _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.11.3″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
pool.minexmr.com
fr.minexmr.com
de.minexmr.com
sg.minexmr.com
ca.minexmr.com
us-west.minexmr.com
pool.supportxmr.com
mine.c3pool.com
xmr-eu1.nanopool.org
xmr-eu2.nanopool.org
xmr-us-east1.nanopool.org
xmr-us-west1.nanopool.org
xmr-asia1.nanopool.org
xmr-jp1.nanopool.org
xmr-au1.nanopool.org
xmr.2miners.com
xmr.hashcity.org
xmr.f2pool.com
xmrpool.eu
pool.hashvault.pro
moneroocean.stream
monerocean.stream<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Malware that deploys crypto mining software has become more and more popular and annoying. It’s not always possible to scan every device in your network with our free or commercial compromise assessment scanners. The good news is that the mining pools for the most popular crypto currency Monero (Symbol: XMR) are limited. Therefore we’ve decided to compile a list of these mining pools that you can use to monitor your firewall or DNS servers. For a very generic approach, your could try using the following patterns: *xmr.**pool.com*pool.orgpool.* Our customers can use THOR to scan for scripts, executables, DNS cache, process connections, log entries and other elements for traces of crypto mining activity.Monero Mining Pool Addressespool.minexmr.comfr.minexmr.comde.minexmr.comsg.minexmr.comca.minexmr.comus-west.minexmr.compool.supportxmr.commine.c3pool.comxmr-eu1.nanopool.orgxmr-eu2.nanopool.orgxmr-us-east1.nanopool.orgxmr-us-west1.nanopool.orgxmr-asia1.nanopool.orgxmr-jp1.nanopool.orgxmr-au1.nanopool.orgxmr.2miners.comxmr.hashcity.orgxmr.f2pool.comxmrpool.eupool.hashvault.promoneroocean.streammonerocean.stream<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[87],"tags":[],"class_list":["post-11025","post","type-post","status-publish","format-standard","hentry","category-security-monitoring"],"yoast_head":"\n