Topic: [DEAD] DeepBit.net PPS+Prop,instant payouts, we pay for INVALID BLOCKS too - page 230. (Read 1601343 times)

You misspelled that. The correct spelling is W-I-N-D-O-W-S boxes.

most denial of service attacks come from hacked linux boxes in multiple countries. It is doubtful these attacks are coming from any kind of dsl or cable connection
these are rooted servers sitting on t1s or t3s, a lot of them small companies or universities. If the hacker is worth anything they of course have hacked log files and are probably connecting through multiple proxy servers anyway.

to make a long story short if you could catch them would it would be difficult to do you can try and prosecute them based on some arbitrary number of supposed lost revenue due to the outage, but this would take the cooperation of multiple law enforcement agencys and is not likely to happen or get anywhere

solution: increase / secure firewall at uplink, and (dont quote me on this because I know very little about bitcoind) but there may be something that can be patched that could protect it from bogus packets on port 8332

I think its very likely that some very well equipped hacked got sick of seeing bitcoin mining become a monopoly and did something about it.

no offense to tycho, slush or their respective pools but one good thing about this is it will create more diversity, lower the difficulty (maybe) and get the little guys a chance to catch up.

@Veldy, tracing a ddos attack is notoriously difficult.  It's easy enough to identify the machines that are part of the botnet flooding you but to determine who's pulling the strings is pretty difficult.

I've seen at least 10 down times in the last 3 weeks.  Most were minor lasting only a matter of seconds ore minutes.  There have been a couple times with 20-30 minutes of down time.  This has been the longest so far, and thats why I moved.  Once deepbit is backup, I'll use it as my "backup" pool if my other primary no fee pool fails.

There do seem to be some regular periods when I look at my stats page and see several instances of "rewards = none." I very highly doubt its a connection problem as internet connectivity is 100% working during these periods.

Has anybody done any investigation on where these DDOS attacks are coming from [meaning who is behind them]?  I assume most come from insecure desktops on broadband that have been breached in one form or another.  It also seems to me that most broadband is from a relatively small number of companies and they should be able to log network scans and such [a little more difficult if people are being infected by emails, or browsing websites and accepting crap they shouldn't], but I think that there must be mechanisms already in place with major ISPs like AT&T, Comcast, Time Warner, the baby bells, and other (sorry, US centric examples) to help track down the origination of an attack and allow for prosecution.  In fact, it is in their own best interest to do just that to avoid flooding their network with undesired traffic. 

What I am trying to say is that something should be done to try and catch who is doing this.  Bitcoin is still small beans in the scheme of things, so the necessary forensics from large and savvy providers on up through the backbone should already be in place and thus such a repeatedly targeted attack of a small number of sites [since there just aren't many bitcoin related sites in the scheme of things] should result in catching script kiddies and even more sophisticated attackers. I would take great satisfaction by seeing this person or people or groups caught and exposed.

Anyway, good luck

I agree with Tycho.  I've never experienced downtime that I noticed and have been mining for at least 3 weeks.  So I hardly think your "daily" assessment is correct.

just run two instances of miner per gpu, each with different priority, higher for your favourite pool and lower for backup one
if main pool is down all work is done in second instance and submitted to backup pool:

ie:


with this setup deepbit is your main pool and slush has around 1 MHps until deepbit is down

Yes, I had some problems, but I won't agree with the "daily" part, and usually those problems caused only a couple of minutes of downtime.

I'm using a failure notification service that sends me SMS when something is not right. But there is no any automatic way to "fix" DDoS if you aren't already using some protection services (which I'm setting up now).

;o

hope everything will be okay

the pool is great and tycho you do a good job always monitoring and getting it back up as quickly as you can and you respond right away.  but that doesn't discount the fact that you keep going down reguarly, pretty much almost daily now, and for extended periods of time.  can you setup something so that there is 0 downtime?  an automatic backup of some sorts?

There is a DDoS attack happening against deepbit servers.
Now I'm taking some countermeasures against this.

Sorry again for the delay.

Been down over an hour... time to switch pools I guess.

You got an ETA when it'll be back up?

[0 Khash/sec] [719 Accepted] [56 Rejected] [RPC (+LP)]

This number of stale shares is normal? It says RPC (+LP) but i don't see any "LONGPOLL: pushed new work" in the console.

We have some problems, trying to find out the cause, sorry.

What was happening? Server was down

Tycho,
your stat page is the best!
very nice work indeed!

Stats page updated with mtGox rate and pool's luck history.

Yes. Currenly both hostnames will work, but setting new one is recommended.