〖ⓉⓊⓉⓄⓇⒾⒶⓁ〗 Stop Bots + Proxies From Using Your Faucet - page 9.

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: FaucetRank.com on October 27, 2015, 11:18:36 PM

Quote from: rkandrades on October 27, 2015, 08:44:05 PM

Quote from: misterbit on October 27, 2015, 06:35:53 PM

Quote from: AlexAce420 on October 27, 2015, 04:18:37 PM

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

Hi, watch this, feel me good, only would have to adapt it.
http://jsfiddle.net/Ztq83/
Someone who knows how to do it please

Yes. It seems good.

But you should implement this making the field mandatory to the submit button. I need to study how to do this yet.

Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown.

However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail.

I will take a look in the faucetbox script tomorrow...

instead of hiding submit button disable it when captcha solved enable it.
will it still fail ? can a bot post disabled button ?

Yes. I'm doing this. The button born as disabled.

Te problem is that a bot can set it to enabled using a java script since the button is being loaded in the client side (HTML).

A button generated by PHP code should solve this problem. But the faucetbox script is a mix of PHP and HTML unfortunately.

FaucetRank.com

hero member

Activity: 868

Merit: 500

Quote from: rkandrades on October 27, 2015, 08:44:05 PM

Quote from: misterbit on October 27, 2015, 06:35:53 PM

Quote from: AlexAce420 on October 27, 2015, 04:18:37 PM

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

Hi, watch this, feel me good, only would have to adapt it.
http://jsfiddle.net/Ztq83/
Someone who knows how to do it please

Yes. It seems good.

But you should implement this making the field mandatory to the submit button. I need to study how to do this yet.

Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown.

However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail.

I will take a look in the faucetbox script tomorrow...

instead of hiding submit button disable it when captcha solved enable it.
will it still fail ? can a bot post disabled button ?

misterbit

sr. member

Activity: 350

Merit: 250

Quote from: rkandrades on October 27, 2015, 08:44:05 PM

Quote from: misterbit on October 27, 2015, 06:35:53 PM

Quote from: AlexAce420 on October 27, 2015, 04:18:37 PM

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

Hi, watch this, feel me good, only would have to adapt it.
http://jsfiddle.net/Ztq83/
Someone who knows how to do it please

Yes. It seems good.

But you should implement this making the field mandatory to the submit button. I need to study how to do this yet.

Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown.

However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail.

I will take a look in the faucetbox script tomorrow...

It would be great

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: misterbit on October 27, 2015, 06:35:53 PM

Quote from: AlexAce420 on October 27, 2015, 04:18:37 PM

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

Hi, watch this, feel me good, only would have to adapt it.
http://jsfiddle.net/Ztq83/
Someone who knows how to do it please

Yes. It seems good.

But you should implement this making the field mandatory to the submit button. I need to study how to do this yet.

Recently I implemented a second simple captcha in my faucet but It just works to hide the claim button. Solving the captcha the claim button is shown.

However if the scammer uses a bot that send automatic commands like HTML POSTs and GETs, my second captcha should fail.

I will take a look in the faucetbox script tomorrow...

misterbit

sr. member

Activity: 350

Merit: 250

Quote from: AlexAce420 on October 27, 2015, 04:18:37 PM

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

Hi, watch this, feel me good, only would have to adapt it.
http://jsfiddle.net/Ztq83/
Someone who knows how to do it please

AlexAce420

member

Activity: 155

Merit: 10

Quote from: rkandrades on October 27, 2015, 04:09:34 PM

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

Hey bud, I implemented this on my faucet. Let me know what you think. http://g-liu.com/blog/2013/08/walkthrough-captcha-php/. Check out my faucet to see how it works.
I will make a tutorial on this post as soon as I get home from work.

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: thefaucetrunner on October 27, 2015, 12:42:22 PM

One of the main things to remember with these bots is that they are using a script, which is fairly rigid. You can do several things to foil the bots, including switching your captcha randomly, implementing legitimate anti-bot math problems and buttons, thresholds for cashouts and other features.

Unfortunately for many of the users on here, these sort of features require knowledge or the money to hire someone with the knowledge. We are lucky to have people like Minifrij etc to help users.

I've made it my task in recent months to fight these bots where I can, but I think it's an uphill struggle most of the time. I have banned so many addresses today...

Are you using the FaucetBox script in your faucet? I'm looking for a way to include more mandatory fields to claim.

My idea is to ask for the e-mail or for a second captcha solution> If the user don't put it, the FaucetBox will show that default message: Missing inputs (or something like this...).

This move should block a lot of bots (At leas the not customizable ones).

I will study how to do this...

thefaucetrunner

sr. member

Activity: 714

Merit: 250

Defend Bitcoin and its PoW: bitcoincleanup.com

One of the main things to remember with these bots is that they are using a script, which is fairly rigid. You can do several things to foil the bots, including switching your captcha randomly, implementing legitimate anti-bot math problems and buttons, thresholds for cashouts and other features.

Unfortunately for many of the users on here, these sort of features require knowledge or the money to hire someone with the knowledge. We are lucky to have people like Minifrij etc to help users.

I've made it my task in recent months to fight these bots where I can, but I think it's an uphill struggle most of the time. I have banned so many addresses today...

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: thefaucetrunner on October 26, 2015, 11:55:22 PM

GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.

Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.

For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.

Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.

As you said the best way to work with getIpIntel is caching the results and coding a counter to limit your requests daily.

For me, the fight against the scammers and bots is teaching me many things. As you know I'm developing my own security system without need to use antibot links or anything like this.

I think I am winning this battle for now...

thefaucetrunner

sr. member

Activity: 714

Merit: 250

Defend Bitcoin and its PoW: bitcoincleanup.com

GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.

Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.

For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.

Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.

Gifted

hero member

Activity: 504

Merit: 501

ofirbeigel

sr. member

Activity: 257

Merit: 251

I can't seem to find the FunCaptcha security options you talk about in the OP. I just get a very basic webpage where I can retrieve my keys.

ofirbeigel

sr. member

Activity: 257

Merit: 251

Quote from: rkandrades on October 25, 2015, 09:14:08 AM

Quote from: FaucetWorld on October 25, 2015, 08:23:53 AM

Quote from: ofirbeigel on October 25, 2015, 08:09:06 AM

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

Exactly.

All in this topic will help you so much. But it isn't enough.

We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too.

Do you now how to do simple changes in a PHP code?

Yes I do and I already implemented what's in here. Hope this helps.

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: FaucetWorld on October 25, 2015, 08:23:53 AM

Quote from: ofirbeigel on October 25, 2015, 08:09:06 AM

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

Exactly.

All in this topic will help you so much. But it isn't enough.

We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too.

Do you now how to do simple changes in a PHP code?

FaucetWorld

full member

Activity: 196

Merit: 100

Quote from: ofirbeigel on October 25, 2015, 08:09:06 AM

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

ofirbeigel

sr. member

Activity: 257

Merit: 251

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: rkandrades on October 23, 2015, 09:36:44 AM

Quote from: rkandrades on October 23, 2015, 09:24:41 AM

Quote from: AlexAce420 on October 23, 2015, 09:05:17 AM

Quote from: rkandrades on October 23, 2015, 08:58:17 AM

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalksearch.org/topic/updated-19jul2016-faucet-owners-against-scammers-and-bots-1200700

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

Ah... One more thing.

My barrier is producing good stats and logs.

In some days I will share the most identified proxies IP list with everyone for free.

Give me two or three days.

Guys... These are the proxy servers and scam IPs that my barrier blocked yesterday. Use for your safe and for free.

Code:

162.254.149.195
85.25.201.120
149.210.131.21
159.253.128.175
95.141.187.216
5.13.207.5
52.5.121.103
179.107.42.151
199.115.117.194
216.218.131.173
65.49.14.148
81.95.123.216
199.115.117.242
173.245.65.202
37.27.61.32
162.213.40.198
107.170.17.131
162.243.158.7
95.141.20.199
45.55.49.75
162.243.127.7
122.155.34.42
199.115.117.243
159.253.128.172
46.34.213.220
159.253.128.169
46.23.66.106
188.138.8.70
66.171.228.75
188.166.121.88
188.226.170.140
145.249.150.87
178.255.153.247
207.244.86.211
108.168.239.92
5.14.141.64
103.10.199.38
66.171.228.247
49.213.18.108
104.236.70.228
217.118.23.97
108.168.159.147
50.116.9.34
45.114.116.209
198.7.58.81
46.101.35.224
119.247.191.114
194.169.217.14
46.4.79.135
93.184.65.176
128.199.53.63
144.76.44.114
146.185.28.178
51.39.128.155
190.248.68.138
173.245.65.88
54.176.17.88
31.47.127.155
38.95.109.38
B81.169.156.135
B146.0.32.8
B198.204.255.122
B162.220.59.66
B195.154.49.144
B96.31.64.186
169.57.121.204
108.168.159.138
38.95.108.244
157.7.164.19
5.13.214.38
188.126.71.90
200.219.249.89
46.28.53.125
108.168.159.144
209.95.51.184
65.49.14.168
116.193.159.34
103.10.197.130
5.45.255.102
5.63.149.102
188.138.56.112
37.48.116.165
23.235.227.109
162.245.145.229
104.131.147.112
103.10.197.90
103.10.197.154
208.123.223.158
B185.28.191.30
45.114.116.66
37.143.95.218
104.236.195.147
66.102.9.40
64.233.172.194
B1.234.45.50
207.244.79.151
B59.8.174.50
23.101.61.176
192.95.47.194
54.191.171.19
173.245.65.3
37.27.44.202
104.156.233.66
5.39.126.59
207.244.79.141
193.109.196.47
107.170.186.79
B52.68.132.0
188.226.155.106
195.58.245.142
173.247.227.146
208.123.223.147
104.232.37.35
49.213.21.108
46.167.121.31
217.78.6.229
104.209.188.207
37.143.89.206
46.165.234.137
148.251.232.140
216.158.192.226
104.131.66.8
176.9.2.173
193.164.133.40
61.19.228.78
4.26.209.54
198.7.59.110
46.165.210.87
123.202.90.219
94.76.233.203
100.43.90.8
54.210.237.68
54.175.89.172
46.23.66.109
37.130.224.22
159.253.128.168
8.28.16.254
46.23.66.107
69.160.43.237
54.176.137.163
176.9.2.173
159.253.128.166
37.99.89.224
209.85.238.18
46.236.26.103
106.187.49.88
162.213.197.190
5.13.239.179
50.117.34.138
66.249.73.242
66.249.73.138
209.85.238.9
54.209.60.63
66.249.73.130
209.85.238.127
78.106.208.116
46.118.100.186
54.219.106.162
206.190.138.20
66.249.84.103
37.27.62.221
128.75.125.34
168.235.194.180
100.43.81.134
128.199.81.128
179.43.147.83
64.233.173.57
65.49.68.194
207.244.79.152
217.118.23.115
208.123.223.152
5.45.192.81
37.229.123.234
128.199.106.5
208.123.223.215
109.86.244.239
208.123.223.52
5.166.194.82
208.123.223.231
176.15.106.169
188.166.109.30
208.123.223.169
5.248.35.11
94.153.44.107
208.123.223.36
69.80.103.148
95.211.226.38
104.196.9.35
106.186.118.77
209.95.51.183
109.86.47.88
208.123.223.127
52.23.156.32
188.138.147.22
188.163.99.194
178.162.208.141
208.123.223.94
104.197.56.196
207.244.76.210
176.194.119.107
178.162.217.146
168.235.198.84
162.245.144.253
5.45.255.69
208.123.223.91
54.173.202.107
8.37.224.103
208.123.223.148
148.251.83.41
207.244.77.1
208.123.223.251
207.244.96.236
93.80.158.30
208.123.223.199
208.123.223.101
5.63.149.98
104.131.209.90
66.85.139.246
178.162.197.211
173.245.65.198

I will update this list weekly at this topic: https://bitcointalksearch.org/topic/updated-19jul2016-faucet-owners-against-scammers-and-bots-1200700

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: rkandrades on October 23, 2015, 09:24:41 AM

Quote from: AlexAce420 on October 23, 2015, 09:05:17 AM

Quote from: rkandrades on October 23, 2015, 08:58:17 AM

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalksearch.org/topic/updated-19jul2016-faucet-owners-against-scammers-and-bots-1200700

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

Ah... One more thing.

My barrier is producing good stats and logs.

In some days I will share the most identified proxies IP list with everyone for free.

Give me two or three days.

rkandrades

sr. member

Activity: 392

Merit: 251

Bitcoin Faucet & Blog

Quote from: AlexAce420 on October 23, 2015, 09:05:17 AM

Quote from: rkandrades on October 23, 2015, 08:58:17 AM

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalksearch.org/topic/updated-19jul2016-faucet-owners-against-scammers-and-bots-1200700

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

AlexAce420

member

Activity: 155

Merit: 10

Quote from: rkandrades on October 23, 2015, 08:58:17 AM

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalksearch.org/topic/updated-19jul2016-faucet-owners-against-scammers-and-bots-1200700

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

Topic: 〖ⓉⓊⓉⓄⓇⒾⒶⓁ〗 Stop Bots + Proxies From Using Your Faucet - page 9. (Read 18866 times)