🌟🎲🌟 MoneyPot.com

[MillionsBTCdev]

Well that was a really cool breakdown of whats going on and I appreciate your efforts to get our money accessible, but the blog site doesnt work either

Yes i can confirm that. As I've said above, soon as i announced the new link, this link came under attack aswell, this link was up privately since last night and went fine, but after announcing it to the public, it made it 'known' to the attacker/s.

If there are some things that you guys can recommend, im open for suggestions. But for now, ill do my best to find a solution for this.

Thanks
-uni

[lorylore]

It is really very irritating to see such great app to be render useless by the attackers. I really hope this attack will tone down soon so we can access back to our wallet. Stay strong, they wont attack a useless site so you already have proven them that this is something that is of great importance to the public.

[RGR991]

It is really very irritating to see such great app to be render useless by the attackers. I really hope this attack will tone down soon so we can access back to our wallet. Stay strong, they wont attack a useless site so you already have proven them that this is something that is of great importance to the public.

Just keep trying the site at random times, I was able to get on a little while ago and withdraw funds, a second later the site went down again 

[El3k0n]

Sad to see that the only thing you can do on moneypot now is get your funds and run while you have a chance

what about the api users? are external apps like betterbets down?

[Avirunes]

Sad to see that the only thing you can do on moneypot now is get your funds and run while you have a chance

what about the api users? are external apps like betterbets down?

No apps are down.You can play there if you want if you are already signed in with Moneypot to the app.Well DDOS will not cause any change in database stealing or something like that.But still those who are worried can move to get peace in mind.

Wonder what is benefiting DDOS attackers.They are just keeping the site down.They are only wasting their electricity and money and nothing else.I am sure moneypot will come up with something and all of their efforts and time they spent will be wasted.

[cazkooo]

Wonder what is benefiting DDOS attackers.They are just keeping the site down.They are only wasting their electricity and money and nothing else.I am sure moneypot will come up with something and all of their efforts and time they spent will be wasted.

When moneypot is down, alot of gambler will be gambling in another site for sure, this actually makes moneypot lose customer which potential earning as well. Downtime in business is not something that the owner will like, it ruin the business no matter how you see it, the ddos could be from some competitor as well

[JackpotRacer]

Sad to see that the only thing you can do on moneypot now is get your funds and run while you have a chance

what about the api users? are external apps like betterbets down?

No apps are down.You can play there if you want if you are already signed in with Moneypot to the app.Well DDOS will not cause any change in database stealing or something like that.But still those who are worried can move to get peace in mind.

Wonder what is benefiting DDOS attackers.They are just keeping the site down.They are only wasting their electricity and money and nothing else.I am sure moneypot will come up with something and all of their efforts and time they spent will be wasted.

hi Avirunes

the attackers have set a target but we don't know which target or what they really want to accomplish.
players want to gamble and will go to other sites and this is nothing new. as long as MP will survive those attacks MP will come back much stronger than before and all players will come back and even more will join. I am talking out of experience (not online ddos attacks)
it is a game of patience and my advice is to sit and wait how long the attackers have the resources to attack or MP will find a solution to stop it (dont know if such a solution exists)

[MillionsBTCdev]

Just a little update for everyone.

The attack is still on going on both servers www.moneypot.com and blog.moneypot.com. BUT there are additional measures added( yes i know you are reading this), and both sites will now usually LOAD but will be slow (at least this time it loads). If one of them doesnt load or shows cloudflare page, use the other one.

For players that had their ip banned by cloudflare, please send an email to uni@moneypot.com with this format:

Subject: MP-IP unban request
Email body:
MP-username
Your IP: you can get your ip at https://www.whatismyip.com/
Your country
And state if you are using any kind of proxy or vpn.

[RHavar]

2. The attack is able to bypass cloudflare which makes me think this are botnets.
3. The attack uses multiple ip ranges, which make it hard to ban all of it.

If the attack isn't showing in cloudflare, it means they have your ip address. If they have your ip address, there is no way you will be able to stop the attack, even firewalls will be completely useless (what they did to BaB was DDoS using spoofed syn packets with cloudflare ip addresses, which allow it to bypass the firewalls) and once it hits a single machine, it will overload it in sheer volume.


The only defense that is going to work is obscurity. You need to change your ip address, and then completely hide it, make sure there's no way for the attacker to know what it is. Make sure that you don't have any DNS entries pointing to the real server etc.

If the attacker doesn't know your real ip address, then they'll be forced to go a) Go through CF   b) by a layer 7 attack.  (Also, ignore the idiots who tell you about "CloudFlare resolvers" and what not, if you configure the service right no one can find your ip address. I for a long time had a 1 BTC open bounty on anyone who could name a bustabit ip address, and it was never claimed)

[MillionsBTCdev]

2. The attack is able to bypass cloudflare which makes me think this are botnets.
3. The attack uses multiple ip ranges, which make it hard to ban all of it.

If the attack isn't showing in cloudflare, it means they have your ip address. If they have your ip address, there is no way you will be able to stop the attack, even firewalls will be completely useless (what they did to BaB was DDoS using spoofed syn packets with cloudflare ip addresses, which allow it to bypass the firewalls) and once it hits a single machine, it will overload it in sheer volume.


The only defense that is going to work is obscurity. You need to change your ip address, and then completely hide it, make sure there's no way for the attacker to know what it is. Make sure that you don't have any DNS entries pointing to the real server etc.

If the attacker doesn't know your real ip address, then they'll be forced to go a) Go through CF   b) by a layer 7 attack.  (Also, ignore the idiots who tell you about "CloudFlare resolvers" and what not, if you configure the service right no one can find your ip address. I for a long time had a 1 BTC open bounty on anyone who could name a bustabit ip address, and it was never claimed)

The attack is showing on cloudflare. And the attacker does not have our server's ip, ive set the server to 'only' accept request from cloudflare ips found at http://cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6
I've been in contact with cloudflare guys, and they have acknowledge that the attack is targeted on www and blog servers. So having that said, im assuming, that the attack does go tru them.

Also as far as i can understand from the logs, the attack is specifically either a HTTP GET or HTTP POST requests that is targeted at https://www.moneypot.com and https://blog.moneypot.com and not their real ip addresses.  Last week MP IP address was revealed due to a * A record present on our DNS records, and this has been removed and our IP are now changed.

If there's any other recommendation you can think of, do let me know.
Thanks
uni

[El3k0n]

Well thank god the backup server is up i was able to get my coins out in time, quick thinking there!

it sucks the main site is down though it kinda looks bad to the public can I ask what you guys are doing to upgrade your protection?

sounds like cloudflare is not going to cut it for you in the future, I only used moneypot for the fun and not as an investment but I would be quite concerned were it the other way around, but then again I've seen you here walking the community through everything not every dev is so open about whats going on so major props on that man!

don't let them get you down....figuratively anyway! Moneypot is a bad ass idea no matter what they do to your servers. I'm not some awesome server expert guy so i don't know what the deal is buy it sounds like you need to throw some of that bankroll at firewalls LOL

[AcoinL.L.C]

Well thank god the backup server is up i was able to get my coins out in time, quick thinking there!

it sucks the main site is down though it kinda looks bad to the public can I ask what you guys are doing to upgrade your protection?

sounds like cloudflare is not going to cut it for you in the future, I only used moneypot for the fun and not as an investment but I would be quite concerned were it the other way around, but then again I've seen you here walking the community through everything not every dev is so open about whats going on so major props on that man!

don't let them get you down....figuratively anyway! Moneypot is a bad ass idea no matter what they do to your servers. I'm not some awesome server expert guy so i don't know what the deal is buy it sounds like you need to throw some of that bankroll at firewalls LOL

There is no cause for concern for investors, we are still processing bets and the bankroll is still increasing its profits. Of course, volume is much lower than typical due to the frequent outage, and most importantly no funds are at risk. The vast majority of the bankroll is consisted of just a few investors whom we are in frequent talks with, the bankroll isn't going anywhere anytime soon.

Thank you for the kind words, its a bit frustrating for the site to be going up/down, but it is what it is. As far as spending on firewalls, we are currently spending a couple hundred bucks a month with CloudFlare, and we are considering more expensive options elsewhere.

[b0art]

They have so many btc

Yes, they do hold over 1000 BTC in their bankroll, which is crowdfunded. You can't expect them to use those funds, can you? That would be worse, since no investor agreed for their invested amount to be spent toward DDoS protection.

and talk about how profits are at an all time high but they cant afford simple DDos protection.
Give me a break. Next they will return and say the ddoser took at the btc and they are broke.
FUCK MONEYPOT THEY SUCK.

Yes, their profits are at an all time high. Most of that is just an advertisement though, since Moneypot's bankroll is primarily investor funded (you should know this, considering you said you invested. Maybe just an lie to shill a competitor). Moneypot claims to have a share in the bankroll, but we don't know how much, and that is their personal BTC in the bankroll, not as a company. Their profits from commissions are always at an all time high, and they probably already spend that on Cloudflare protections.

I know it's mostly user funds but they must be making money and should have some set aside for unforeseen problems like this one. Here we are, days later and the site is still having difficulties. Maybe its time to stop having representatives post all over the forum attacking everyone and maybe he should get a job to be able to pay for proper DDos protection.

[hopenotlate]

They have so many btc

Yes, they do hold over 1000 BTC in their bankroll, which is crowdfunded. You can't expect them to use those funds, can you? That would be worse, since no investor agreed for their invested amount to be spent toward DDoS protection.

and talk about how profits are at an all time high but they cant afford simple DDos protection.
Give me a break. Next they will return and say the ddoser took at the btc and they are broke.
FUCK MONEYPOT THEY SUCK.

Yes, their profits are at an all time high. Most of that is just an advertisement though, since Moneypot's bankroll is primarily investor funded (you should know this, considering you said you invested. Maybe just an lie to shill a competitor). Moneypot claims to have a share in the bankroll, but we don't know how much, and that is their personal BTC in the bankroll, not as a company. Their profits from commissions are always at an all time high, and they probably already spend that on Cloudflare protections.

I know it's mostly user funds but they must be making money and should have some set aside for unforeseen problems like this one. Here we are, days later and the site is still having difficulties. Maybe its time to stop having representatives post all over the forum attacking everyone and maybe he should get a job to be able to pay for proper DDos protection.

Just few minutes before I read this, I logged into moneypot, deposited and invested 

[b0art]

They have so many btc

Yes, they do hold over 1000 BTC in their bankroll, which is crowdfunded. You can't expect them to use those funds, can you? That would be worse, since no investor agreed for their invested amount to be spent toward DDoS protection.

and talk about how profits are at an all time high but they cant afford simple DDos protection.
Give me a break. Next they will return and say the ddoser took at the btc and they are broke.
FUCK MONEYPOT THEY SUCK.

Yes, their profits are at an all time high. Most of that is just an advertisement though, since Moneypot's bankroll is primarily investor funded (you should know this, considering you said you invested. Maybe just an lie to shill a competitor). Moneypot claims to have a share in the bankroll, but we don't know how much, and that is their personal BTC in the bankroll, not as a company. Their profits from commissions are always at an all time high, and they probably already spend that on Cloudflare protections.

I know it's mostly user funds but they must be making money and should have some set aside for unforeseen problems like this one. Here we are, days later and the site is still having difficulties. Maybe its time to stop having representatives post all over the forum attacking everyone and maybe he should get a job to be able to pay for proper DDos protection.

Just few minutes before I read this, I logged into moneypot, deposited and invested 

Good luck with that investment. I'm sure you'll regret it soon.

[stingleword]

Good luck with that investment. I'm sure you'll regret it soon.

There's no need to be a snarky asshole about it. We get it, you had a bad experience withdrawing. Move on, the rest of us have been using MoneyPot for years and are not put off by such a small glitch.

[b0art]

Good luck with that investment. I'm sure you'll regret it soon.

There's no need to be a snarky asshole about it. We get it, you had a bad experience withdrawing. Move on, the rest of us have been using MoneyPot for years and are not put off by such a small glitch.

A small glitch? Getting annihilated by a DDos attack is not a small glitch. Its a fatal flaw.

[hopenotlate]

Good luck with that investment. I'm sure you'll regret it soon.

There's no need to be a snarky asshole about it. We get it, you had a bad experience withdrawing. Move on, the rest of us have been using MoneyPot for years and are not put off by such a small glitch.

A small glitch? Getting annihilated by a DDos attack is not a small glitch. Its a fatal flaw.

My investiment answer to your post was ment to be a kind of joke to your excessively repeated ( in my opinion) complaints. My opinion is similar to stingleword one in the sense that we clearly got you think your Moneypot experience is  negative.
Ok. THE MESSAGE IS CLEAR.

But annihilated is not a word that reflects actual situation, try to be more objective : in these days ( not without some delays) am using moneypot apps invested divested deposited and withdrew.
Did I experience delays when doing so? YES.
 
But first of all appreciate the costant communication and update held  here : most important fact for me.
Second also appreciate the efforts they are putting to bring this attack to an end: they also open to suggestions and are spending (if you can read properly) something like $2000/monthly to keep MP safe.

Will keep on using MP: rarely I'm in the urge of having my BTC ready to spend (to be honest it only happened once in last 2 years and half) so I'm well-disposed to bear some delay.

Good luck with that investment.

oh btw
Thank you for this. 

[b0art]

Good luck with that investment. I'm sure you'll regret it soon.

There's no need to be a snarky asshole about it. We get it, you had a bad experience withdrawing. Move on, the rest of us have been using MoneyPot for years and are not put off by such a small glitch.

You do know that moneypot has been under new ownership for the last 6 months. RIGHT?

[b0art]

Good luck with that investment. I'm sure you'll regret it soon.

There's no need to be a snarky asshole about it. We get it, you had a bad experience withdrawing. Move on, the rest of us have been using MoneyPot for years and are not put off by such a small glitch.

A small glitch? Getting annihilated by a DDos attack is not a small glitch. Its a fatal flaw.

My investiment answer to your post was ment to be a kind of joke to your excessively repeated ( in my opinion) complaints. My opinion is similar to stingleword one in the sense that we clearly got you think your Moneypot experience is  negative.
Ok. THE MESSAGE IS CLEAR.

But annihilated is not a word that reflects actual situation, try to be more objective : in these days ( not without some delays) am using moneypot apps invested divested deposited and withdrew.
Did I experience delays when doing so? YES.
 
But first of all appreciate the costant communication and update held  here : most important fact for me.
Second also appreciate the efforts they are putting to bring this attack to an end: they also open to suggestions and are spending (if you can read properly) something like $2000/monthly to keep MP safe.

Will keep on using MP: rarely I'm in the urge of having my BTC ready to spend (to be honest it only happened once in last 2 years and half) so I'm well-disposed to bear some delay.

Good luck with that investment.

oh btw
Thank you for this. 

Good for you. YES I am mad and I have a right to be. And anyone else who is experiencing problems has the same right to be mad. The longer MP cant stay up without going down is a death sentence for them, you and your investment.