[rognjen]

Another issue is that these are all just scripts that scan things randomly and it takes a minute to set it up on a new server.

That means whenever a server is compromised it'd have this type of stuff installed and it'd start running it immediately.

That means two things: the list would indefinitely block servers that have been compromised but then cleaned up, and you'd never get a list comprehensive enough because servers are constantly being compromised.