|
Title: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: Mikellev on January 22, 2014, 03:32:07 PM Hi there,
we had a lot of time today to find more information about the recent "hacks" of accounts in lots of pools. It seams that its always the same IP. Everytime the user logs in, with username + pw + pin, so no bruteforce or something. He MUST have the login information from other pools. So maybe some of you can get some more info......... 85.25.152.63 india757.startdedicated.com Server gehört zu -> http://www.server4you.com/ Aber steht in Deutschland -> http://www.ip-adress.com/ip_lokalisieren/85.25.152.63 http://reverseip.domaintools.com/search/?q=85.25.152.63 http://whois.domaintools.com/coinfor.us http://whois.domaintools.com/amtechcebu.com http://www.majesticseo.com/reports/neighbourhood-checker?d=coinfor.us&IndexDataSource=F -> everqueen.net everqueen.net -> bestätigt Cebu City! Domain Name: COINFOR.US Domain ID: D43768243-US Sponsoring Registrar: ENOM, INC. Sponsoring Registrar IANA ID: 48 Registrar URL (registration services): whois.enom.com Domain Status: clientTransferProhibited Registrant ID: 594753FFB8FF7E49 Registrant Name: Jocelyn Amatong Registrant Organization: OS Registrant Address1: ML Quezon Registrant City: Cebu City Registrant State/Province: cebu Registrant Postal Code: 6015 Registrant Country: Philippines Registrant Country Code: PH Registrant Phone Number: +63.921645 Registrant Email: So ALWAYS use different Username + PW + PIN on any pool you mine! Or use 2 fact auth if possible. Mike http://poolerino.com Title: Re: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: HinnomTX on January 22, 2014, 04:10:51 PM All goods words of advice. I don't recommend leaving much coin with the pools. Auto-withdraw at least daily and check your wallet. And please, always mine to a wallet you control directly. Don't mine to a Cryptsy address.
Title: Re: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: xbudahx on January 22, 2014, 05:00:39 PM Lazy idiots that use the same login to multiple sites, I'm not really feeling sorry for them.
Title: Re: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: zneww on January 22, 2014, 06:12:47 PM Why doesn't anyone use P2Pool. Decentralized.....like it should be...coins straight to your wallet. no hackers. lol
much confuse. Title: Re: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: dejikocv on January 22, 2014, 06:21:48 PM Why doesn't anyone use P2Pool. Decentralized.....like it should be...coins straight to your wallet. no hackers. lol much confuse. To me, I normally get more coins in a pool that in P2Pool. Title: Re: Recent theft of mining pool accounts, mostly EAC and DOGE Post by: zneww on January 22, 2014, 11:10:47 PM Why doesn't anyone use P2Pool. Decentralized.....like it should be...coins straight to your wallet. no hackers. lol much confuse. To me, I normally get more coins in a pool that in P2Pool. Very dependent on your PING to the ip and Kh/s |