BOTS ON MY FAUCET NEED HELP ASAP | Bitcointalksearch.org

mcb1221

legendary

Activity: 1162

Merit: 1000

Quote from: JerryMotov on June 01, 2016, 11:29:25 AM

Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!

gOOD IT IS NICE THAT YOU ARE BACK WITH YOUR FAUCET AGAIN , DO REMEMBER TO ADD REDIRECTION LINK AS IT WARDS BOTS AND NASTY PEOPLE AWAY DUE TO SOME 5 SECONDS DELAY.

JerryMotov

newbie

Activity: 56

Merit: 0

Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!

dfinc

member

Activity: 105

Merit: 100

retired since 2019;find me online:functionallyvoid

Quote from: JerryMotov on May 31, 2016, 08:09:14 PM

I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry

Hey Jerry, you can get a list of VPNs, IPs etc. to ban on your faucet at this topic here: https://bitcointalksearch.org/topic/attention-all-faucet-owners-list-the-bots-vpn-proxy-ips-here-1481327.
Hope this helps! Wink

JerryMotov

newbie

Activity: 56

Merit: 0

I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry

Racey

legendary

Activity: 1134

Merit: 1000

Soon, I have to go away.

Now he needs help with this problem

I can't find this

misterbit

sr. member

Activity: 350

Merit: 250

Quote from: FaucetRank.com on May 31, 2016, 12:00:37 AM

Quote from: misterbit on May 30, 2016, 08:39:38 PM

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

No never IP blocking will never solve bot problems

Hello, I answered to the question of the user, greetings.

mcb1221

legendary

Activity: 1162

Merit: 1000

Blacklist all the inorganic ip in your script , this is the best way to cope up. meanwhile you can put custom captcha to avoid bots.
You can also install firewall script and redirection script which will take 5 seconds to load your site , actually there are many options , chose the one which suits you.

zenitzz

hero member

Activity: 560

Merit: 500

Quote from: wdnj on May 30, 2016, 04:45:07 PM

You need a custom faucet script to avoid bots.

So if i'm not have costum faucet script can't install anti-bot on my faucets site is there another way to address the bot problem for site owners faucet with less fund?

Racey

legendary

Activity: 1134

Merit: 1000

Soon, I have to go away.

Will pm you about the form.

JerryMotov

newbie

Activity: 56

Merit: 0

Thanks for all the answers!
I added the list to my htaccess @misterbit
And @gifted I currently have a similar script on my site https://bitcointalksearch.org/topic/stop-bots-proxies-from-using-your-faucet-1211353
However I can't get the last step to work
I can't find this in my index. (I am using faucetbox btw.)
Do you know what I have to do there @Racey

So my current security only is the htaccess file with the deny from IP deny from IP ect..
and I use reCAPTCHA now.
However I don't think that this is enough (is it?)

and I want to try Cloudflare on my site but I have zero experience with it.
And faucet box says:
Be careful! This is an advanced feature. Don't use it unless you know what you're doing. If you set it wrong or you don't properly configure your proxy AND your server YOU MAY LOSE YOUR COINS!

So I am afraid to lose my bitcoins..

And I am definitley going to take a look at CSF firewall when I have the time.

Are there more things I can do to prefent bots from accessing/using my site?

minix

newbie

Activity: 16

Merit: 0

Hi Jerry!

You must try CloudFlare, maybe it doesn't block so many threats but it offers very useful data to compare with your analytics account. This way you can be more secure if there's suspicious traffic on your site and take actions to solve it.

Be a faucet owner it's very demanding especially on security tasks.

I hope you can solve it.

Regards!

FaucetRank.com

hero member

Activity: 868

Merit: 500

Quote from: misterbit on May 30, 2016, 08:39:38 PM

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:

order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

No never IP blocking will never solve bot problems

misterbit

sr. member

Activity: 350

Merit: 250

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:

order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

Gifted

hero member

Activity: 504

Merit: 501

i can give you a code to put in your script

Code:

//We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
$view['main']['result_html'] = '

Sorry Proxy not allowed !!

';
$message = "Proxy";
goto error;
}
$q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
$q->execute(array($username,$ip));
$row = $q->fetch();

JerryMotov

newbie

Activity: 56

Merit: 0

Thanks for your answers!
I am defenitly going to use your tips.
I am working on it now
I am currently busy with it. I'll keep you all up-to-date!
My site will be up tomorrow

wdnj

hero member

Activity: 762

Merit: 500

You need a custom faucet script to avoid bots.

Newcoins2020

sr. member

Activity: 406

Merit: 250

Quote from: JerryMotov on May 30, 2016, 08:37:09 AM

Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

Hi Jerry,

Install a firewall (I recommend CSF) firewall and start by blocking those ip's then make sure bots are automatically banned if they make too many requests in a certain timeframe

Then install a different kind of captcha.

Racey

legendary

Activity: 1134

Merit: 1000

Soon, I have to go away.

Try this Jerry

Stop Bots + Proxies From Using Your Faucet

https://bitcointalksearch.org/topic/stop-bots-proxies-from-using-your-faucet-1211353

JerryMotov

newbie

Activity: 56

Merit: 0

Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

Topic: BOTS ON MY FAUCET NEED HELP ASAP (Read 832 times)