Bitcoin Forum

Im fed up with bots and thinking of just dropping my faucet...They dont get away with much because i keep a close eye on it but not sure what to do...

You need a faucet with registration system to around the bot problem. See mine www.cryptohydrant.com this script is also for sale

bots are cool  ;D

Keep on maintaining security and finding ways to do so.
Things like captcha are usually enough to deter them but some bots even couter-act this along with timing systems in order to get greater profits.
The reality is that these bots can never really be controlled, all you can do is monitor them and find ways to control them (though this would be hard without trying to review what certain people do)!

I think your right, i need some kind of reg system on it

so i am keeping my faucet off until i implement the reg in the faucet. wish me luck

This is the one who's draining mine:

https://i.imgur.com/Poaupsn.png

https://i.imgur.com/wahB0aT.png

My faucet reward is 100 to 600 only in 30 minutes, but that sucker can get 1,000 to 10,000 satoshis in my funds. In less than a minute!  >:(

since "all" faucets are using the same template, it's easy for bots, we have to customize max as possible.
What about create a topic with IPs and address to block? they can change both easily, right? what are the options?

Faucet owners have to move to registration systems to survive. I started out with faucetbox and within a cople weeks i was being drained but now i have a new faucet with registration and complete control over users and problem is completely gone. Bots dont survive on my faucet

Loll poor you

Change your API key of your Faucetbox, enable 2FA in security for logging, change your password , 

Nope, I'm giving away, the one stealing from me is poor. That's why he's stealing. I'm just poor in coding :D

My faucet is direct to xapo, I guess, there is a hole in Xapo API, I'm already using the script what most Xapo faucet owners used.

What do you mean bots are cool?All these scammers and the bots they are using are one of the main reasons the faucets are dying.

yeah, this is just a way of talking  ;D

Even having manual faucets can't stop scam from people as they will try every way to drain your faucet like multiple account, tor browser to get new ip and claim etc. But paying manually can save your bitcoin but it will take so much of your time than instant faucet. Faucet these days are not good business to run.

what a big lie !!

what should a login or register system brings agains bots ???????
for moonbitcoin,fieldbitcoins,claimbtc  i know  many bots and they have a register system i can name you more examples if you wish ;)#


kind regards

Maybe a registration system will not be able to keep away all the bots but it will help reduce the problem a bit and this is better than the zero protection other scripts provide.

I've had a registration system on http://cryptodatabase.net since it's start and haven't had any issues with bots. Registering is the way to go.

You can also use your htaccess file to block proxies and vpns which will cut down on botting.

I think reg is good as a  deterrent but not proof but its better then doing nothing, i am now coding a login page on my own for the script i have, wish me luck and ill post here when im done.

I was thinking to that to have so many email accounts to log in again may be a deterrent to. Im just not sure how to connect the Id in the table for the timer instead of the btc address

its not a lie registration system works, not only that but having complete control over user accounts means if a bot does get in you can kill it easily pluss the multiple account detection there is no way for bots to survive and a minimum reward limit befor payout means you can look over everything before paying. obviously the scripts you are referring to are not that good if they cant stop bots and multiple accounts.

IMHO, having a registration on a faucet, will not stop this method:

As you can see, he steals in less than a minute, so, for me, it's too late even if I can kick the e-mail from the system.

I thinks it's a security problem of Xapo APIs.

Right now, I'm blocking Indonesian IPs (because the sucker is Indonesian) using htaccess.

that's not a bot work

Exactly!
So, even if I implement a registration system on my faucet, it will not stop this suckers.
I think we need now is the script for blocking a specific e-mail address from claiming the faucet and strengthen the Xapo API security.

@Gifted
Can you do a black listing system, that whoever e-mail address entered to it can not claim a reward from the faucet?

if you had a script that you press a pay button once a day and everyone gets paid you can scan through the payees before you press the button and remove the bad once.

Yeah,registration system works plus manually payments. the issue with API for thirdpart services.

 can bots use IPV6 or this VPS one?
 

Does anyone know how to implement a system for registering in faucetina?  :-\

Im creating one now for my faucet

Maybe you need ip tracker for your faucet, because many bot just use proxy to break our faucet. Or you can add register system with email confirmation for register :) thank you

IMO, implementing a registration system is no problem if the payment method of the faucet is via FaucetBox or Direct to wallet address.
But for direct to Xapo faucets like mine, the user have to use the e-mail they used to register in Xapo, which means the e-mail is already valid.
So, for the direct to Xapo faucets, all we need is just a Proxy blocker or IP blocking system or better, an e-mail address blocking system.

Bots are using the same email address to, so having an xapo account does not stop them but maybe if i went to emails only or xapo accounts only and tracked emails on timer instead of ips it might work.... ive been taking my time on the solution and it will come to me. as for now im building a reg system to the front page of my faucet.

My faucet already tracks ip's... that does not work.... also blocking proxies do not work 100%....it only takes one guy to drain your bank roll

By the way, since June 18, when I block most IP addresses in Indonesia, my faucet was not visited again by the sucker from that country. Problem is, I have no indonesian visitors.

 Blocking country IP isn't best solution for prevent Bots attack.

these can be changed easily

This are realy abuser. Some day him will be understand.  ;D

Problem is, the one who attacked me and stole my bits didn't used bot.

did you tried to google how he does that?
if you know how, its more easy to know what to do about

How can the same email address be allowed to make claims so frequently? This seems like a bug in the scripts you are using

I have email blocking feature on my faucet visit http://afreebitco.in/xapo-faucet/
system block users automatically when a user solve wrong captcha 5 times .

this feature help me to detecte bot users . because without solving google recsptcha users can't claim reward but if someone trying to do that he'll get autoban by script .

it works? because captchas on bots are solved by real humans(manually input or by other people wich are pay for do this.. sites like 2captcha etc)
so the probability to solve or not, its the same

Real human solve captcha but when they make few mistakethey'll get banned for forever .

I can also trake who is using proxy and if i detect manuly that someone is abusing faucet i block him manuly .

because there  is no log in

Huh !?

But how ? How does he just claim that many times and then claim more then it is set to ? 100k from you in 10 minutes wow !!

I also want to ask the same question... The same user will not be able to claim every second, if the payout schedule is set to 30 minutes. A bot has to generate several accounts with different email

addresses to be able to do that. Some of these guys hide behind VPN's / Proxies ... so it's difficult to pin point the region this is coming from. If a couple of these bots hits a smaller faucet, it will have

to stop withdrawals to counter this... until the exploit could be stopped.  ::)

I also have experienced similar incidents to attack bot so I shut down the site because of a loss of my faucet sites. I heard there were some there are some scripts that can prevent your site from attack bot but the price are quite expensive. now i change to create faucet rotator to get back my lost because attacked by bot.

what if... you just put a shortener webscript on your page.
Like adfly or shorte.st.
in this cause you have... a framebreaker, a need to click skip ad button, a adblock check and some cpm income


I have send a mail to adfly and i did get a respond that i am allowed to use it for a faucet. (what did surprise me)
i am thinking of starting a faucet-in-the-box . Not for the money alone, but for advertising my blog to.'

The downside, you can't advertisethe faucet on ptc and TE

hes opening 10 vpn accounts at once and claiming all at once with a bot  thats how

Tha VPN trick is known, but how he can claim more than the maximum amount configured on my faucet is my big question. My faucet's maximum reward is 700 that day, but he can get 1,000 to 10,000. I have 3 theories 1) SQL injection, 2) Xapo API hole or vulnerabilities, 3) the faucet script has vulnerabilities.

if its the faucet scrip admin he would have got it all and he might have an old cache from you on his browser

AFAIK captchas can stop bots from claiming in faucets. So you need a strong captcha system like solve media . it gives very difficult captcha for the known spaming IPs and proxies

solve media allows typos and still passes the answer. Also, many of the captchas are being solved by humans by use of sites like 2captcha

Is your php secure?

I have a very little knowledge in PHP but I'm an easy-learner, and since I'm using just a known xapo faucet script and not updated since 2015, I think it is not secure.