Bitcoin Forum

Dear community, if you can provide any information about this matter we would be most grateful.

SatoshiDICE has been under sustained DDoS for over a week now. We've confirmed that SatoshiCircle has been suffering the same. Are there other gaming sites that are under heavy attack over the past week or more? Please PM me if so.

There have not been any extortion messages or demands.  We believe we know who is doing it... though we do not have proof. What new BTC gaming operator has come out with both a blatant clone of SatoshiDICE (copy and design elements ripped straight off the site) and a blatant clone of SatoshiCircle within the last month? What operator has been lying about usage statistics while simultaneously sending out numerous well-crafted Press Releases claiming innovation and market dominance to gain attention? Who could it be?

A line has been crossed here and we are working to remedy it. We regret and apologize for the interference suffered by our players throughout this episode. If anyone within the community can provide information on this matter, either through private PM or publicly in this thread, we would be very grateful.

SD

PS - Note that we do not suspect either Just-Dice or PrimeDice whatsoever, both run by esteemed individuals who have been great innovators.

We've been under attack past few weeks on and off, not to the degree of SD though. Mainly just moderate flood attacks. JD has been under significant attack as well. Don't think identifying whoever is doing this will be possible and even if we were able to, not much could be done about it. More important to focus on how we can mitigate these attacks instead.

If I were to point a finger of blame I'd say it is the new notorious dice site that is getting a decent amount of attention, however ddos attacks on SD occurred before their launch so that nullifies my suspicions a bit.

Given the scale of SD it might be worth utilizing http://www.prolexic.com/  or the most expensive cloudflare option if you are unable to mitigate the attacks through more standard means.


EDIT: After posting this message we're now suffering from a stronger ddos which has pushed us offline.

Hi SD -

Yes, SatoshiCircle can confirm that we, too, have been under a vicious attack for the last couple of weeks.
Sorry to hear you've been suffering the same mate - but we're totally in alignment with your suspicions!

Best of luck on the defense! May the Satoshis prevail :)

Team SatoshiCircle

As an endorsed company I'm a tad disappointed with you folks pointing fingers at another company. If I think it's the same company all the organizations are claiming it is "BetcoinTM" I can assure you folks your probably wrong. The gentleman is pure 100% class and is a true asset to bitcoin gambling. I think instead of pointing directions at other companies we could use the time, resources, and energy on adapting away to defeat these dos attacks so players can continue on doing what they enjoy doing. Dos attacks are not uncommon for larger companies and with proper backup plans like mirror backup sites this can help defeat the purpose of the attack and that is your player base.

I've been looking into betcoindice's transactions and I've found evidence of house bets / blockchain spamming. Will make a new thread.

https://bitcointalk.org/index.php?topic=297110.0

Woah, surprise surprise lol. It was always so obvious. I guess you're the first to get some real 'proof'

We have been at a very sustained DDOS for the past week but managed to mitigate it! AND I do agree with your thoughts on who is doing it and it really does make a lot of sense to attack the top 3 sites, competing with their 3 products! So low class!!



I would suggest you to stop schilling. How much are they paying you?

Satoshi Dice you just purchased a site for a $11.5 million, you should be able to migrate this very easily. Do you have a CTO or even a lead networking person?

It seems like if you put a valuable Internet Bitcoin property up, it will get DDoSed. First pools, then exchanges, the forum and wiki/.org, now gambling sites. The previous attacks would rotate where they point their bandwidth every few hours or days, likely to frustrate many sites with partial downtimes instead of just taking out a single site.

The first step would be to identify several of the IP addresses, contact the ISP's abuse departments to see if they will facilitate owner identification for anti-malware research, and implement full promiscuous monitoring with the owner's permission to determine command and control or obtain an image or copy of the malware. You probably wouldn't want to identify your attack mitigation efforts as representative of the interests of Internet gambling sites unless legal in your jurisdiction and the bot attacker's.

Then what do you do when c&c is from its-only-cyber-crime-if-you-are-a-civilian.army.mil...

I dont know but either ive been having HORRIBLE luck lately or some of bets got fukked up. Like the last 20 bets with them have gone wonky and I only one 1 time on a 91%....Use with CAUTION ATM

It is funny though....A few times when I was trying to log in to SD to see my bets if they won, I kept getting redirected to Just-Dice....Anyone care to explain? If true you should be ashamed, you are not only hurting SD(which IDGAF about) but you are hurting us the betters as innocent collateral damage. Dont fuck with the clientele base we will destroy you if so/thatisall

I think blockchain is suffering from ddos lately too...

If someone wants to investigate the DDOS, here are some of the IPs that have been hitting us: https://i.imgur.com/T4v0oI9.png & https://i.imgur.com/i58avqi.png

Note: there could be false positives among the IPs. Also I would recommend the advanced DDOS protection of CloudFlare. It did the trick for us!

This has to have resulted in some erroneous bets no?

It results in the websites going offline entirely.

There was a guy claiming to be the DDOS'er. He asked for "protection money" to make it stop. I don't know if that really is the guy who is doing the DDOS.

What I can tell you is that renting a DDoS attack is both cheap and very easy.

My guess is that an unexperienced user (or maybe a couple of them) are renting these services for 1 or 2 hours and repeating at different times of the day. Sustaining an attack for 24h/7 might cost more than the person is willing to pay and may also be irrelevant, i.e. you just need to affect the site during the peak hours.

If my guess is correct, it is pointless trying to find out who is doing this. You would need to contact these "companies" providing such services and ask who is paying them to attack you; repeat for every other such company.

The only reason I'm posting this is that I missed it in this thread, so I'm not sure if people are aware of how easy it is to launch a DDoS attack.

Probably a botnet, not much you can do other than bringing in better DDoS protection.

Dear colleagues,

 We don't want to engage in lengthy discussions, but we can not simply ignore all of the statements in this thread, and will state a few facts:

 We're spending more than $20,000 a month on protected hosting, and even THAT provides insufficient at times.

(http://www.bitcoincasinopro.com/reviews/betcoin-tm-unrated-2-4-bitcoin-complaint-received/)

All of our gaming sites have been under intermittent moderate to severe DDOS attacks for about three weeks now,
the casino site went offline for about 48 hours during the worst attack. Even our mining equipment website which is not related to gambling in any way has  been attacked several times. There are constant floods, and database hacking attempts, however, we're not pointing fingers at anyone, and instead are working with the best security experts on mitigating and preventing these issues. We're an established company, and we've been in business for 25 years, our heavy spending on advertising doesn't cross any lines - it's a free market economy. And regarding the new features - they're being rolled out on an almost weekly basis, and very soon our games will be completely different from those offered by the earlier market entrants. We have consciously introduced a game interface that is more familiar to most players, with the intent of guiding them in the direction of a better user experience.

Best regards,

betcointm

$20,000 in hosting alone seems a bit excessive for such site, but there isn't much I can say about that alone.

Now, what I find weird is: 1) "mining equipment". Why would you use mining equipment for taking bets ?. 2) "database hacking attempts". Why are you even exposing your database ? Or are you claiming this is an internal issue with your hosting company ?

Why am I asking this ? Because it is irrelevant whether you pay $20k, $200k, or any amount of k dollars if in the end you do such things. High price also doesn't equate in good quality of service.

And this is all offtopic obviously :)

@knowitnothing:

 These fees include more than one site, as we have 6 existing gaming sites, and other businesses. The mining equipment site is not related to the gambling sites operationally, just through the ownership. The only thing that we share operationally is advertising bids: https://bitcointalk.org/adrotate.php?adinfo The incessant hacking attempts - obviously are external, it's like
being subjected to a non-stop penetration testing. Some of these succeeded in briefly disrupting our services, but as we continuously keep working on improving our defenses - the uptime statistics are improving.

What's funny, is that the only popular dice site that currently is not under Ddos attack, is

letsdice.  who also, by the name Martin Gale, that person also started an IPO of 10,000 bitcoins, which we're funded successfully.  Looks suspicious?

Pretty heavy, they get hit hard.  Going down for hours at a time.

Wait...  Is bitcointalk also being Ddosed now?  I got this error message:

Connection Problems

Sorry, SMF was unable to connect to the database. This may be caused by the server being busy. Please try again later.  

It seems to run very normal, then all of a sudden, the site slows down.

Edit:  Sorry for spamming this topic, but I tend to add a new reply as going through all the posts.. :/

Have you been stealing peoples' work all 25 years or is that a new policy?

You don't consider stealing peoples' content to be crossing any lines? There have been dozens of SD clones, all of which have done something new or interesting or at least didn't outright steal copy.  You're claiming to spend $20k per month on hosting (that's probably more than the top ten Bitcoin sites in the world spend, btw) and "heavy spending on advertising" and you can't pay someone $100 to write new site copy for you?

You're correct that this is a free market. We're not going to sue you or pull IP claims. We'll just let you stand on your own, in front of people, and in front of yourselves.



SatoshiDICE How to Play:

BetCoinDice How to Play:

SatoshiDICE How it works

BetCoinDice How it works

SatoshiDICE Advanced

BetCoinDice Advanced

 ::)

@SatoshiDICE_PR

 We fully appreciate the ingenuity of SatoshiDICE, and its contribution to reshaping the world's gaming industry. However the drive for innovation must never stop, and we are very humble in acknowledging the fact that our initial success is in large part thanks to our standing on the shoulders of giants - nanos gigantum humeris insidentes. The similarities that you mentioned will gradually disappear, and our dice game will rapidly evolve into a product which is very different from today's SatoshiDICE. We also have several other products in advanced stages of development, and will be launching them in the coming weeks. We're certain, that all of our colleagues will then see that we do contribute to the overall development of the industry by our strong drive for innovation. We're spending significant amounts of resources, bringing people who never heard about bitcoin before into the bitcoin community, and we believe that every member of the community, including our competitors will benefit from this expansion. Lastly, please feel free to send us a PM, and we will gladly share all of our contacts in the IT security industry, and our own experience in mitigating DDoS and other attacks. We have a close working relationship with one of the world's leading IT corporations, and their experts will be glad to help our friends.

Kind regards,

betcointm

As far I know SatoshiCircle had a lot of security vulnerabilities. Better don't spend so lot money on hosting services, just look into your code and protect it better.

[jokes]
That is inexcusable.  Apparently BetCoinDice has been running their game for 25 years.  How dare SatoshiDice copy their words verbatim like that!  It's one thing to mimic but to make an exact copy is just rude.
[/jokes]

But seriously how can a company that claims to be reputable stoop so low as to just copy and paste another site's content like that?

Just-Dice has been under DDoS attack for the last month or so.  I've no idea who is responsible.

"The similarities?"  You mean the verbatim copy and paste job?

You guys have your rhetoric down, I'll give you that. It's ironic that such good writers, working for a 25-year old company spending "lots of resources on innovation which must never stop," and which "fully appreciates's the ingenuity of SatoshiDICE," can't even be bothered to write original copy for the homepage.

SatoshiDICE is back up now. Let's see what fun innovations you have in the pipeline for us. Game on, bros.

Everybody knows that the DDos attacks have been from extortionists, they were asking for 100 BTCs from satoshidice and 1 btc from satoshi circle respectively.. why some of you are associating the attacks to a particular site, that makes no sense.. if betcoin.tm is online is simply by the fact they are paying for better cloud protection.

You believe they spend $20000 per month on fucking cloud protection? http://www.neobux.com/ spends less, with millions of hits per day.

A while back there were other DDoS attacks on SD with some people demanding money. They subsided and were intermittent. This recent attack has been different. Much stronger, sustained, and no extortion messages. In any case, it's been overcome, and SD is up... and paying nowhere near "$20k per month" for hosting ;)

wow ain't that legit tho in this new age bitcoin universe of "know it all" computer geeks attempting to operate like Vegas mobsters?...anyone? :P

LOL[-funny-]~now listen :
i know where satoshi keeps his "toolboX", where is this dice extortion thread and how much does one get for not crashing your mock gambling site!?? ::) thanks in advance!

nice logo~look familiar?v\/v
http://s3.amazonaws.com/media.percussionlab.com/images/photos/ny_state_of_mind:_konkrete_jungle/large_ny_state_of_mind:_konkrete_jungle.jpg

Well, when you will make an accusation you need to have proofs, by saying " i think its somebody cause i imagine this" isnt right, i read months ago that satoshidice was rigged but i dint posted on that topic cause they dint have proofs and thats not    
ethic, i gamble very often and im happy that at least there is one site that can stand online,

And for ASICRUS why dont you read a little more the past about this before posting... the extortionist had an account with the name of "ScammerZhouTong" and posted on the official satoshidice topic days ago..

link?~ i don't see that anywhere >> https://bitcointalk.org/index.php?topic=77870.1660

The posts have been deleted, this is the guy : https://bitcointalk.org/index.php?topic=285696.0 , he also posted in the satoshicircle topic asking for 1.4 btc.

good looking tho: must be a joke!~ anyone know how many bitcoins SD takes in from users per day?..you would think a pro would ask for something significant=)TIA!!

He's obviously making fake claims in an attempt to profit off the misfortune of a few sites. The attacks hitting SD,PD,JD etc are quite massive and not something someone would do for a chance to beg for a few bitcoins which myself and the owners of these sites would never hand over.

my team crashes through walls all day, problem with me asking for anything is i can't promise you it will ever come back on again! ::)

Yes. That guy was either A. someone trying to get a freebie out of the situation , or B. a decoy.

Inputs is currently under a DDoS attack. We have our suspicions.

We are under DDOS again since this morning.

How much do these kinds of sustained attacks cost? Seems there are now at least half a dozen gaming sites under perpetual ddos.

Google will easily point you to places asking for $900/month. Not much for those that can easily pay 20x/month in hosting alone (or maybe that includes such costs already), just saying ;)

I've seen rates as low as a few hundred USD per week on the Russian forums. But I doubt it they (whoever it is) are paying for it. They probably have their own botnet and use it as they wish. We were actually suspecting a bitcoin miner's network to use their network to do the DDOSes as a couple of the IPs which were flagged as botnet by our firewall were matching actual player accounts. It could be a coincidence though...

Our Dice site is under an 80GB/s heavy flood. the front end is still up, but the counters stopped functioning.
And most importantly - we received an anonymous email asking if we need a paid DDoS mitigation consultation.

loading...
1 BTC = $ loading... USD
Bet Counter

won
won
won
Recent Wins

฿ loading... BTC
$ loading... USD
Bitcoins Won

https://i.imgur.com/tLvUQRF.png?1

80GB/sec ??? Are you serious??? Can you show us some screenshots of your server load or wherever you see the 80gb/s speed? And please don't fake it. No offense, but these numbers you keep throwing around sound ludacris. Do you realize that to be able to survive a 80GB/s DDOS attack, you will need something like 500 gigabit connections fully dedicated to your server, which is as unrealistic as your $20k a month anti-ddos protection.

1 BTC per "wrench", however i just can't guarantee how long it would last!  ;D  LOL

That's quite interesting, because 80GB/s is 640 gbps and one of largest DDoS attack ever recorded on the internet was 300gbps.

~nuclear powered ASICzZz no doubt! ;-) haaaa

Maybe he meant 80gbps unless he is actually serious about the attack being 80GB/s.

hey,
satoshidice, making ludicrious claims, they havent innovated anything in over a year and a half,

betcoin.tm is much more reliable, they have both onchain and offchain, havent seen them ever down due to a ddos,
pay out over 100+ btcs instantly and EVERYTIME!
plenty of different games to choose, and seems like they are always adding new ones,
they always talk with customers to see how they can improve and making the gaming experience better,
there support is reliable polite and professonal,

satoshidice? dont know if anyone can even trust them anymore, ive had only bad experiences with them, customer service never replied to me, there onchain betting takes forever to pay back, leaves me thinking they are changing up some kind of rolls overthere in the backround, honestly when im waiting to see if i won or not, they could be mixing stuff up over there in the kitchen and i have no idea,

play betcoin.tm try it you will see its much better!

elazar

SD Onchain betting doesn't "take forever." It takes one block typically. If BetCoin is paying out without waiting for a block, they are in for a very ugly surprise soon.

Your FUD regarding "changing up some kind of rolls" doesn't make any sense. Every roll is verifiable, and BetCoin copied the same verification method. In fact, I now see BetCoin has ripped off yet another part of SD - it copied word for word the Terms and Conditions agreement. BetCoin operates under the laws of Costa Rica, does it?  ::)

SD has had dedicated customer support for a while now - we help people very quickly.

Stop schilling for a dishonorable business.

I believe his trust rating says it all. Betcoin should at least get some more honorable members to schill for them. His 100btc payout statement is as big as Betcoin's 20k anti-ddos and 80gb/s ddos attack.

tkone is linked to BTCTalkAccounts.

Shortly after updating my forum signature, Inputs.io was under a bigger DDoS attack. This attack was the scale that managed to take down our CloudFlare endpoint.

i dont understand why im marked as scammer i didnt scam,
and im just saying the truth about betcoin.tm there a good site to play at,
they are reliable the customer support is very polite and friendly and professional
they have new innovative interesting games,


meanwhile satoshi has been sold no1 even knows the new owners, satoshi lags... they have ludacris claims, they didnt innovate for over a year and a half now, nothing new same exact thing, laggy unresponsive, no customer support... they just easy place to take your money, atleast betcoin pays you back and with honesty, betcoin always payed back and instantly with no problems ever...

i would stick with betcoin.tm no need to go anywhere else really... and if anthing you dont like about them you can always email them and they will be more then happy to work it out with you, they listen to there customers, they work with everyone, they want to make sure everyone happy in the end, great company if you ask me, you'll see betcoin will be around because with that motto it will for sure prove to work!

elazar

Wow, pretty crazy. I hope the attacks stop soon.

Does this affect the number generator? I like to play small amounts on the 50% game and loose like 18 times in a row, win one then loose another 12+ Or am I just extremely unlucky?  ::)

No, your luck just sucks lol

that's why these games are fraudulent THEY ARE NOTHING LIKE A REAL DICE GAME!!!  ::) Vegas/Atlantic City lobby don't like online games anyhow

real casinos don't offer 100/64000 sided dice

But D&D does.

no video type dice games there i find that hard to believe! ::) really?

The DDoS has been thwarted for several days now. But even if it is overcoming the website, it doesn't affect rolls whatsoever.  DDoS only harms the website, it doesn't affect Bitcoin transactions on the blockchain, or SD's processing engine.

For someone who is spending $20,000 a month on cloud DDoS protection, it is interesting that their nameservers are trademarkarea (their domain registrar) and that their IP is hosted on Amazon Web Services.

Are you sure it is AWS? He told me it is the Computer Sciences Corporation in PM. Man this company is such a fraud...

MX for betcoin.tm: 192.185.38.97

192.185.38.97 is a WebsiteWelcome / HostGator IP address. This IP also hosts 50 or so sites.

Received: by gateway13.websitewelcome.com (Postfix, from userid 5007)
   id 7BF994AA8B2BF; Sun, 22 Sep 2013 06:28:24 -0500 (CDT)
Received: from gator4061.hostgator.com (gator4061.hostgator.com [192.185.4.72])
   by gateway13.websitewelcome.com (Postfix) with ESMTP id 6C80E4AA8B29B
   for <admin@glados.cc>; Sun, 22 Sep 2013 06:28:24 -0500 (CDT)

A for betcoin.tm: 54.229.110.140

http://myip.ms/info/whois/54.229.110.140 belongs to Amazon Web Services (EC2).

I was about to give them the benefit of doubt, maybe they're using EC2 to filter traffic.. but they have port 22 (SSH) open.

You must be wrong... Amazon does not cost $22500 per month...

I think you misunderstood them... they are spending $20k per month creating fake transactions, not DDoS protection ;)

While we are all joking here, using Amazon can cost much more than $20,000/month. Check https://aws.amazon.com/dedicated-instances/ where they will happily grant you a 20% discount if you are paying more than $2,000,000 (under "Reserved Instance Volume Discounts").

Seems Bitcoin sites in general attract a lot of attention from DDosers.  It's rather annoying to say the least.

https://i.imgur.com/vg7oXNR.png

76mln page views in a few hours :) 0 minute downtime. Is this cool or what!

 SatoshiDICE and SatoshiCircle working well now.