[ANN] NiceHash.com - sell & buy hash rate cloud mining service / multipool

[TheIcky]

Looks like everything just came back online.

[Ntrain2k]

Westhash back up as well.

Looks like the SHA256 server took a pretty good hammering from 14:49 to 16:34 UTC according to my charts. Scrypt looks like it wasn't hit.

[Ntrain2k]

I think westhash might be getting hit on the sha256 port again, but not as bad as earlier.

[anticlimax]

I keep getting orders that are invisible..
Any reason why this keeps happening?

[Rigsuss]

Server offline again some news ?

[yan7181]

it is down.

[amdminer]

I'm unable to connect to again.

My user id is 1D3TzzPz54yS45inm5nbyWY4BVJWYPYX5J

All my workers trying to connect from 85.26.164.187 currently.

P.S. Only westhash is working for me but there's alotta rejects.

[nicehash]

Hi,

As you have seen we've been under massive DDoS attacks in the past days. Once again, these are classical extortion DDoS attacks. We are able to mitigate DDoS by network filtering, however, protection and filtering also blocks some good traffic (miners), unfortunately. Attacker is probably attacking by bots. We have gathered some useful data and reported attacker to FIRST (http://www.first.org/) and TF-CSIRT (http://www.terena.org/activities/tf-csirt/). We are not negotiating with attackers and hopefully they will at least have a restless and disturbed sleep while the security incident groups are trying to identify them. If anybody has any info about these attackers (they are also attacking other pools) we will reward any useful information.

Thank you for understanding and thank you for using our service!

From: anonymousemail@anonymousemail.us
Return-Path: <anonymou@free.hostodon.me>
X-Mailer: Anonymous Email - https://anonymousemail.us
Message-Id: <E1Xkim5-0001Sp-Ll@free.hostodon.me>
Date: Sun, 02 Nov 2014 01:12:05 +0100

Subject: ***Spam*** DDOS

<p>NiceHash is down again.</p>

<p>And you know what to do to stop it.</p>

<p>1 BTC @ 16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg</p>

<p>I will not ddos it for long, but...i will keep doing it regulary until I&#39;m paid.</p>

<p>and you will be losing your customers/miners...</p>

Return-Path: <anonymou@free.hostodon.me>
From: anonymousemail@anonymousemail.us
X-Mailer: Anonymous Email - https://anonymousemail.us
Message-Id: <E1XkDCr-0003gy-7K@free.hostodon.me>
Date: Fri, 31 Oct 2014 15:29:37 +0100

Subject: ***Spam*** DDOS!

<p><br />
Your mining server is under DDoS attack.</p>

<p>Pay me 1 BTC and I will stop and you are free for lifetime of your site.</p>

<p><br />
My btc address: 16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg</p>

<p>DO NOT REPLY! I can&#39;t receive your emails. Pay me and I will know it&#39;s you.</p>

<p><br />
If you ignore me, and I don&#39;t receive your payment within 2 hours, price to stop will increase to 2 BTC and will increase for 1 BTC for every day of delay/attack.</p>

<p>&nbsp;</p>

[Rigsuss]

offline again.

[mewhoyou]

wow...

please do not encourage. Once you pay, I am sure they will be back.

[xhabit]

DONT PAY NOTHING!!!!

[sainf]

wow...

please do not encourage. Once you pay, I am sure they will be back.

This is a peer to pool how are they under attack can someone explain?

[Ntrain2k]

wow...

please do not encourage. Once you pay, I am sure they will be back.

This is a peer to pool how are they under attack can someone explain?

You attack the web site and/or the ports that people connect on.

Pretty simple.

[8thdwarf]

So you know how you see this message from "CloudFlare" every so often on Nice or WestHash.  I looked them up.  One of their service claims is DDoS protection.  Lol.  I'd love to know if Nice/West is using paying for the DDoS protection from CloudFlare cause if they are refunds are in order...

[deznuts]

They really suck at running the website. I don't think I have ever seen any other site with this many problems staying up.

[Automatic Monkey]

wow...

please do not encourage. Once you pay, I am sure they will be back.

Not only don't pay them, but any information you get as to their identity, please share it here.

They have pissed off a lot of miners, and there may be some revenge in their future. 

[Deagle21]

Is the backend working because my miners are still hashing away and Westhash pool says its alive?  The front end doesn't seem to work though, are we getting credit or should I switch to another pool until the attack is over?

[nicehash]

We are currently being hit by 8+ Gbps DDoS attack which is not so easy to mitigate ... we'll keep you updated when we'll have more information available.

[greek_hephaestus]

Someone paid 1 BTC to 16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg on 2014-11-02 17:22:03 https://blockchain.info/address/16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg
What is the necessity of the existence of Cloudflare, if they can not protect their clients?

[nicehash]

Someone paid 1 BTC to 16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg on 2014-11-02 17:22:03 https://blockchain.info/address/16JEzTkXGeCFPrCoPo9hnSVZWLHMau31fg
What is the necessity of the existence of Cloudflare, if they can not protect their clients?

Hmm, to be clear: we have not paid this, as said before, we can't negotiate with the attackers since this usually results into never-ending story.

Also, CloudFlare is doing a fairly good job, purely HTTP-based attacks are quickly mitigated. These attacks weren't targeted at our web portal, but on our stratum servers - these are harder to protect (there is no public solution such as CloudFlare for stratum protocol). The issue is that our service is tightly integrated into our stratum servers, therefore sometimes when stratum servers are being hit too hard, web fronted also becomes unresponsive ... keep in mind that this is not just an ordinary pool but an advanced stratum-based service.

Thank you for your support!