marinkoco/miner-detector repository overview

⁠Miner Detector Docker Image

Detects suspicious crypto-mining processes on DEB-based Linux hosts.

⁠Features

-Scans running processes for known crypto miners.
-Detects high CPU usage.
-Outputs JSON results or logs to a mounted directory.
-Lightweight Ubuntu-based Docker image. \

⁠Pull the image

bash docker pull marinkoco/miner-detector:latest #Run the container

⁠Basic Scan (one-shot)

docker run --rm --pid=host --privilaged marinkoco/miner-detector:latest

⁠Continous scan with logs persisted to host folder

mkdir -p ~/miner-detector-logs docker run -d \
--name miner-detector \
--pid=host \
--privileged \
-v ~/miner-detector-logs:/logs \
marinkoco/miner-detector:latest

⁠Check logs

tail -f ~/miner-detector-logs/miner_detector.log

⁠Notes

-Requires --pid=host and --privileged to access all host processes.
-Works on Linux (including WSL2 Ubuntu).
-Read-only detection - safe to run.