I did some further investigation. The IPs used were mostly IPs from dedicated servers.
Some of the IPs:
86.105.55.14 - host14-55-105-86.static.arubacloud.de
89.36.212.17 - host17-212-36-89.static.arubacloud.fr
89.36.216.23 - host23-216-36-89.static.arubacloud.de
There's nothing wrong with these IPs. They are just IPs. Someone who has access to a lot of IPs and ofcourse wallets can drain a faucet easily. It's easy to ban/block domains, but only if you spot the "bad" domains in time.
One of the addresses that used an arubacloud address was this one:
https://faucetbox.com/en/check/1Bh3j1D39XgmRoyLurp9exVe1w2HFXkchkThe attacker attacked a lot of faucets, even those with extra protection. Check the link.
I had over 1300 unique visitors this month yesterday. Today alone I had 1299, which adds up to around +2600. That number seems to correspond with the number of Funcaptchas solved this month. I have no reason to assume that this was an attack that bypassed the Funcaptcha. A script/app/tool was used, but I guess the user still clicked the captchas.
They can now days bots are bypassing funcaptcha but it's not funcaptcha fault it's fault of faucet box script .
I have been looking (and testing), and I don't think there's a bot that can bypass Funcaptcha. Show me. Don't say there is, just show me. Show me proof. Anything will do. I will be thankful; So will other faucet owners be.
I recently implemented a auto blok feature in my faucet where a user solve wrong captcha will result in auto block .
It _is_ your right to do so, but to me that just sounds unfair. I am a faucet user. I am a user that clicks ads (and brings in money for you). So if I make one little mistake on your captcha I will be blocked? That's just stupid; Anyone can make mistakes... But again, that's your right and choice. I just think it's stupid.