What IP's does the Mindmeld system need access to?

[Scott_Fitzmaurice]

Hello Everyone,

I have spun up the ubuntu VM with the MineMeld iso.  This system is behing a firewall.  What IPs/URL's does this system need to have access to?

Thank You,

Scott

[xhoms · Accepted solution]

Hi @Scott_Fitzmaurice,

MineMeld, due to its nature, will connect to many different Internet resources. Based on the miner configuration, MineMeld could connect to openphish.com, www.auscert.org.au, www.binarydefense.com, www.malwaredomainlist.com, infosec.cert-pa.it, support.office.com or  torstatus.blutmagie.de among many others.

The following two FQDN's correspond to Palo Alto Networks hosted Web Services to keep MineMeld instances updated:

• MineMeld Auto Update Service: minemeld-updates.panw.io
• MineMeld Suggestion Box Service: minemeld-notifications.panw.io