Bitcoin Forum

Economy => Micro Earnings => Topic started by: JerryMotov on May 30, 2016, 12:37:09 PM



Title: BOTS ON MY FAUCET NEED HELP ASAP
Post by: JerryMotov on May 30, 2016, 12:37:09 PM
Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/ (https://www.myloc.de/)
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: Racey on May 30, 2016, 06:56:02 PM
Try this Jerry

Stop Bots + Proxies From Using Your Faucet

https://bitcointalk.org/index.php?topic=1211353.0 (https://bitcointalk.org/index.php?topic=1211353.0)


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: Newcoins2020 on May 30, 2016, 08:02:51 PM
Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/ (https://www.myloc.de/)
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

Hi Jerry,

Install a firewall (I recommend CSF) firewall and start by blocking those ip's then make sure bots are automatically banned if they make too many requests in a certain timeframe

Then install a different kind of captcha.


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: wdnj on May 30, 2016, 08:45:07 PM
You need a custom faucet script to  avoid bots.


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: JerryMotov on May 30, 2016, 10:08:06 PM
Thanks for your answers!
I am defenitly going to use your tips.
I am working on it now
I am currently busy with it. I'll keep you all up-to-date!
My site will be up tomorrow


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: Gifted on May 31, 2016, 12:14:45 AM
i can give you a code to put in  your script
 
Code:
//We do not allow proxy here
 if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{
  $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Sorry Proxy not allowed !!</p></div></div>';
    $message                     = "Proxy";
    goto error;
  }
  $q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
  $q->execute(array($username,$ip));
  $row = $q->fetch();


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: misterbit on May 31, 2016, 12:39:38 AM
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:
order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: FaucetRank.com on May 31, 2016, 04:00:37 AM
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:
order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

No never IP blocking will never solve bot problems


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: minix on May 31, 2016, 11:10:26 AM
Hi Jerry!

You must try CloudFlare, maybe it doesn't block so many threats but it offers very useful data to compare with your analytics account. This way you can be more secure if there's suspicious traffic on your site and take actions to solve it.

Be a faucet owner it's very demanding especially on security tasks.

I hope you can solve it.

Regards!


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: JerryMotov on May 31, 2016, 04:24:05 PM
Thanks for all the answers!
I added the list to my htaccess @misterbit
And @gifted I currently have a similar script on my site https://bitcointalk.org/index.php?topic=1211353.0 (https://bitcointalk.org/index.php?topic=1211353.0)
However I can't get the last step to work
I can't find this <form method="POST" class="form-horizontal" role="form"> in my index. (I am using faucetbox btw.)
Do you know what I have to do there @Racey

So my current security only is the htaccess file with the deny from IP deny from IP ect..
and I use reCAPTCHA now.
However I don't think that this is enough (is it?)

and I want to try Cloudflare on my site but I have zero experience with it.
And faucet box says:
Be careful! This is an advanced feature. Don't use it unless you know what you're doing. If you set it wrong or you don't properly configure your proxy AND your server YOU MAY LOSE YOUR COINS!

So I am afraid to lose my bitcoins..

And I am definitley going to take a look at CSF firewall when I have the time.

Are there more things I can do to prefent bots from accessing/using my site?


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: Racey on May 31, 2016, 04:42:44 PM
Will pm you about the form.


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: zenitzz on May 31, 2016, 05:37:58 PM
You need a custom faucet script to  avoid bots.
So if i'm not have costum faucet script can't install anti-bot on my faucets site is there another way to address the bot problem for site owners faucet with less fund?


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: mcb1221 on May 31, 2016, 05:44:02 PM
Blacklist all the inorganic ip in your script , this is the best way to cope up. meanwhile you can put custom captcha to avoid bots.
You can also install firewall script and redirection script which will take 5 seconds to load your site , actually there are many options , chose the one which suits you.


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: misterbit on May 31, 2016, 06:03:17 PM
Hi, put this in your .htaccess and will prevent the main IP that attack your website.

No never IP blocking will never solve bot problems
Hello, I answered to the question of the user, greetings.


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: Racey on May 31, 2016, 06:07:43 PM
Now he needs help with this problem

I can't find this <form method="POST" class="form-horizontal" role="form"> in my index


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: JerryMotov on June 01, 2016, 12:09:14 AM
I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: dfinc on June 01, 2016, 12:53:41 AM
I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry
Hey Jerry, you can get a list of VPNs, IPs etc. to ban on your faucet at this topic here: https://bitcointalk.org/index.php?topic=1481327.0 (https://bitcointalk.org/index.php?topic=1481327.0).
Hope this helps! ;)


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: JerryMotov on June 01, 2016, 03:29:25 PM
Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com (http://golden-faucet.com)
If someone finds any security vulnerabilities please let me know!!!


Title: Re: BOTS ON MY FAUCET NEED HELP ASAP
Post by: mcb1221 on June 01, 2016, 03:55:51 PM
Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com (http://golden-faucet.com)
If someone finds any security vulnerabilities please let me know!!!


gOOD IT IS NICE THAT YOU ARE BACK WITH YOUR FAUCET AGAIN , DO REMEMBER TO ADD REDIRECTION LINK AS IT WARDS BOTS AND NASTY PEOPLE AWAY DUE TO SOME 5 SECONDS DELAY.