Here is how I would attempt to execute such an attack, based on :
- buy a server in the same data center as a large pool
- sniff packets intended for the pool (this used to be possible on OVH if you were on the same subnet as the intended host, probably still is)
is this really possible? i mean of course it is possible if you are working in that datacenter, but for outsider and only knowing pool ip..?
It's definitely possible.