Author

Topic: BOTS ON MY FAUCET NEED HELP ASAP (Read 855 times)

legendary
Activity: 1162
Merit: 1000
June 01, 2016, 10:55:51 AM
#19
Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!


gOOD IT IS NICE THAT YOU ARE BACK WITH YOUR FAUCET AGAIN , DO REMEMBER TO ADD REDIRECTION LINK AS IT WARDS BOTS AND NASTY PEOPLE AWAY DUE TO SOME 5 SECONDS DELAY.
newbie
Activity: 56
Merit: 0
June 01, 2016, 10:29:25 AM
#18
Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!
member
Activity: 105
Merit: 100
retired since 2019;find me online:functionallyvoid
May 31, 2016, 07:53:41 PM
#17
I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry
Hey Jerry, you can get a list of VPNs, IPs etc. to ban on your faucet at this topic here: https://bitcointalksearch.org/topic/attention-all-faucet-owners-list-the-bots-vpn-proxy-ips-here-1481327.
Hope this helps! Wink
newbie
Activity: 56
Merit: 0
May 31, 2016, 07:09:14 PM
#16
I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
May 31, 2016, 01:07:43 PM
#15
Now he needs help with this problem

I can't find this
in my index
sr. member
Activity: 350
Merit: 250
May 31, 2016, 01:03:17 PM
#14
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

No never IP blocking will never solve bot problems
Hello, I answered to the question of the user, greetings.
legendary
Activity: 1162
Merit: 1000
May 31, 2016, 12:44:02 PM
#13
Blacklist all the inorganic ip in your script , this is the best way to cope up. meanwhile you can put custom captcha to avoid bots.
You can also install firewall script and redirection script which will take 5 seconds to load your site , actually there are many options , chose the one which suits you.
hero member
Activity: 560
Merit: 500
May 31, 2016, 12:37:58 PM
#12
You need a custom faucet script to  avoid bots.
So if i'm not have costum faucet script can't install anti-bot on my faucets site is there another way to address the bot problem for site owners faucet with less fund?
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
May 31, 2016, 11:42:44 AM
#11
Will pm you about the form.
newbie
Activity: 56
Merit: 0
May 31, 2016, 11:24:05 AM
#10
Thanks for all the answers!
I added the list to my htaccess @misterbit
And @gifted I currently have a similar script on my site https://bitcointalksearch.org/topic/stop-bots-proxies-from-using-your-faucet-1211353
However I can't get the last step to work
I can't find this in my index. (I am using faucetbox btw.)
Do you know what I have to do there @Racey

So my current security only is the htaccess file with the deny from IP deny from IP ect..
and I use reCAPTCHA now.
However I don't think that this is enough (is it?)

and I want to try Cloudflare on my site but I have zero experience with it.
And faucet box says:
Be careful! This is an advanced feature. Don't use it unless you know what you're doing. If you set it wrong or you don't properly configure your proxy AND your server YOU MAY LOSE YOUR COINS!

So I am afraid to lose my bitcoins..

And I am definitley going to take a look at CSF firewall when I have the time.

Are there more things I can do to prefent bots from accessing/using my site?
newbie
Activity: 16
Merit: 0
May 31, 2016, 06:10:26 AM
#9
Hi Jerry!

You must try CloudFlare, maybe it doesn't block so many threats but it offers very useful data to compare with your analytics account. This way you can be more secure if there's suspicious traffic on your site and take actions to solve it.

Be a faucet owner it's very demanding especially on security tasks.

I hope you can solve it.

Regards!
hero member
Activity: 868
Merit: 500
May 30, 2016, 11:00:37 PM
#8
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:
order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

No never IP blocking will never solve bot problems
sr. member
Activity: 350
Merit: 250
May 30, 2016, 07:39:38 PM
#7
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:
order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all
hero member
Activity: 504
Merit: 501
May 30, 2016, 07:14:45 PM
#6
i can give you a code to put in  your script
 
Code:
//We do not allow proxy here
 if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
  $view['main']['result_html'] = '

Sorry Proxy not allowed !!

';
    $message                     = "Proxy";
    goto error;
  }
  $q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
  $q->execute(array($username,$ip));
  $row = $q->fetch();
newbie
Activity: 56
Merit: 0
May 30, 2016, 05:08:06 PM
#5
Thanks for your answers!
I am defenitly going to use your tips.
I am working on it now
I am currently busy with it. I'll keep you all up-to-date!
My site will be up tomorrow
hero member
Activity: 762
Merit: 500
May 30, 2016, 03:45:07 PM
#4
You need a custom faucet script to  avoid bots.
sr. member
Activity: 406
Merit: 250
May 30, 2016, 03:02:51 PM
#3
Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

Hi Jerry,

Install a firewall (I recommend CSF) firewall and start by blocking those ip's then make sure bots are automatically banned if they make too many requests in a certain timeframe

Then install a different kind of captcha.
legendary
Activity: 1134
Merit: 1000
Soon, I have to go away.
May 30, 2016, 01:56:02 PM
#2
Try this Jerry

Stop Bots + Proxies From Using Your Faucet

https://bitcointalksearch.org/topic/stop-bots-proxies-from-using-your-faucet-1211353
newbie
Activity: 56
Merit: 0
May 30, 2016, 07:37:09 AM
#1
Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry
Jump to: