Saint Petersburg, Saint Petersburg City arrived
I am suffering constant attacks from this city (Saint Petersburg). How do I block the access of this town? I can only block the access of Russia whole. But I would like to block only this city.
You can't really block access just from one town and I think that's not what you really want to do. How do you know it's Saint Petersburg? Maybe you just should ban one specific network or AS that's attacking you? |
|
|
|
1G5Qm8Epq2cbFCkkaAfg4Qe2K4sWoXcjEE
6HUC
why..?
6HUC means that transaction was sent to you, but didn't get confirmed for more than 6 hours. There were no transactions sent to you yet (it can take up to 48 hours), so I don't see any problem here. |
|
|
|
$data[‘captcha_info’] = $captcha;
However that line does not appear to exist in r64.
Can you suggest somewhere I might stick it ( watch it !!...lol) in the r64 file?
It does, it's line 237 in main index.php file. |
|
|
|
I'll go through the code again later today and try to find a cause. For now however - as much as I hate to propose such a blunt "solution" - have you tried wiping your database clean and reinstalling the script?
I Have considered. Thought I could update to 64 at the same time if i decided to do it, but I'll have to redo a lot of tweaks I've done ...Its doable ...just a bit of a "head F%$%^", ya know? ...yeah you know ...lol look i might go ahead and do it. Whats impressed me most about you and you're team is that you always sem to have an immediate answer to most problems . If this has you stumped , it must be something really weird ... I gather if i save my existing Config.php and my "template/index.php and reload on completion all should work again yeah?...all things being equal. I'll do this and let you know..asap. Yea, just restoring your config.php and template's index.php should be enough, they're compatible with r64. However, just to be sure, make backup of everything, all files and database. |
|
|
|
Hello. I'm having a problem with my faucet, It's new and ready to go , but testing has revealed a problem with the actual faucet script itself . Or at least my implementation of it. When I attempt to use the faucet as a user, The attempt fails, The page appears to reload , but instead of presenting me with the "x satoshis was sent to your address" message it reverts back to the original page and no payment goes through . Interestingly , after Kazuldur suggested that i turn on error display in my config.php file ,The faucet mechanism began to operate properly , a payment was sent successfully to my faucetbox account on a test, but 3 errors print to top of the page and an error log appears in my Public_html directory ...as follows: [23-Jun-2016 09:08:51 UTC] PHP Notice: Undefined index: ip_check_server in/ ####/######/public_html/index.php on line 1570 [23-Jun-2016 09:08:51 UTC] PHP Notice: Undefined index: ip_check_server in /####/######/public_html/index.php on line 1586 [23-Jun-2016 09:08:51 UTC] PHP Warning: Cannot modify header information - headers already sent by (output started at /#####/#######/public_html/index.php:1570) in /home/#######/public_html/index.php on line 1620 When I turn off the error display parameter in config.php ...the faucet stops working again???!!! I know very little about coding , but I've tried to identify the problems . I think i've located the correct lines of code and it looks to me that something is not right with the retrieval of the NastyHosts.com list. I'm not sure what the header warning is all about though . I've requested help from the faucetbos guru's , but they seem a little busy at the moment ...can anyone else offer a suggestion on what I might do to rectify this fault? I'm very much a novice when it comes to coding so you'll need to be pretty specific ...sorry  I'm sorry, somehow I've lost your message. I get waaay too many PMs...  So... I have no idea what's going on. Don't mind the "Cannot modify header information" error, it's just the result of these two errors before that. Now, these two errors shouldn't happen. It's not even a problem with "retrieval of the NastyHosts.com list", it's a problem with even checking if NastyHosts.com is enabled. And it shouldn't cause a payment to fail... The only way I can see for them to happen is corrupted database. $display_errors = true; fixing the faucet is even more bizzare. I'll go through the code again later today and try to find a cause. For now however - as much as I hate to propose such a blunt "solution" - have you tried wiping your database clean and reinstalling the script? |
|
|
|
Thanks @NeedItFindIt I have corrected my JS. I was aware of the issue but forgot to fix. Grr old age.  Anyway back to the issue at hand. This Session error is completely Random. Here is the recent payouts graph. [...] Clearly some people are able to claim. I have even tried switching back to the default template and have the same error. ~AvalonRychmon. P.S. This isn't a new install its over 4 months old. Open developer tools in your browser, switch to the network tab and filter by Images. About half-way through (by the way, 100+ requests per page load is insane) there's a request for an image with URL: " http://gr8.cc". That's obviously not an image and that's what's breaking the session. I don't know what causes this request though. Some people may be able to claim if: 1. they're bots that don't load images 2. they have disabled images in their browsers 3. (most likely) they have slow internet connection and are able to claim coins before their browsers start downloading this "image" EDIT: The problem is this resource: http://gr8.cc/bxslider/bx_loader.gif . Something on your page (I'm not sure what) tries to load it, but then it redirects to http://gr8.cc and breaks the session. |
|
|
|
İn faucetbox script , we cant put banners in the center of the page.opening the page you see the claim button , so nobody needs to see the down parts of the site.you can put at most 5-6 banners that can be seen easily , rest is in vain.can sth be done for that , or advice to me to solve that?
Edit the template file directly. However usually putting more than 3 banners actually decreases your revenue, so I'm not sure you want to do that  Hi i noticed this in an old posting Why do you say this? Why does placing more than 3 banners on a site decrease revenue? That opinion is based on: 1. personal experience 2. Google AdSense policies 3. opinions of other people, like https://www.quora.com/What-are-the-advertising-industry-best-practices-for-number-of-ad-units-per-pageSo it's just an opinion, I don't have any research with explanation or even evidence that I can point you to. However I think that it's caused mainly by two things: 1. if a user sees too many ads, they start to give more mental focus on finding out what's and ad and what isn't, which makes them less likely to actually engage with ad 2. ad networks try to choose the best paying ads, but they will try to not repeat the same ad in multiple banners on single page view. So let's say there are 5 ads that can be displayed on your page, worth respectively $1, $2, $3, $4 and $5. If you only have 3 ad slots, the ads that will be shown will be $5, $4 and $3. So an ad click gives you a minimum of $3. However if you have 5 ad slots, then the cheapest ad that's shown on your page is worth only $1. It's only a speculation, I'm not an ad expert, so take it with a grain of salt |
|
|
|
Very good update Kazuldur, guys have to get the ASN. I got this list here, please correct me if I'm wrong https://www.shadowserver.org/wiki/pmwiki.php/Stats/ASN
16509, 16276, 26496, 3265, 16276, 41075, 14987, 3292, 20473, 174, 25761, 23352, 36666, 46844, 42708, 30058, 39369, 24940, 23522, 1653, 17048, 16265, 35908, 30217, 8560, 31800, 28753, 29182, 6461, 22822, 3265, 23522, 1653, 30217, 31800, 22822, 1668, 26769, 15694, 13301, 13213, 35028, 9121, 5, 36375, 32787, 4436, 33926, 30083, 4134, 4766, 25700, 30475, 14037, 35425, 10316, 24989, 7175, 32335, 63473, 13789, 202109, 10105, 52173, 34482, 40430, 19531, 62282, 12843, 42363, 54290, 5522, 8267, 34145, 55053, 28917, 4058, 51191, 15072, 42678, 50245, 23387, 20278, 2878, 1299, 4637, 22773, 3356, 209, 2914, 6453, 6453, 31815
Looks good. However please notice some of these ASes are residential networks, so you risk banning also real users. |
|
|
|
Tap prompt the user to enter email and password before placing the wallet. Is it possible to do that? Help to reduce the bots.
Sure. Our Faucet in a Box script doesn't support that, but you can customize it freely if you know PHP, it shouldn't be to hard. Also I'm not sure, but I think that Elbandi's Minifaucet allows that: https://bitcointalk.org/index.php?topic=333748.0 . |
|
|
|
Faucetbox is abandoned.
The bots dominate faucetbox
Can you send me IP addresses of confirmed bots? I'll ban them in NastyHosts. I'm tired of blocking ips. I have over 3 000 ips. All collected hand by myself. To try to stop the bots I would have to stand 24 hours at the computer looking one by one. Abandoning my social life to try to stop the bots. I'm tired. Yea, blocking individual IPs is tedious and probably not enough to stop all bots. We're using NastyHosts to ban whole networks and even autonomuos systems that origin bot traffic. If you can send us these IP addresses, we can probably extrapolate them to IP networks and ASNs, which hopefully should be more efficient. Of course that can't stop bots using residential Internet connections, but these should be reduced by the faucet timer itself. |
|
|
|
If faucetbox really wanted to stop bots implement 2FA security key. But they just want to get 2.5%
FaucetBOX.com supports 2FA through Email, Google Authenticator and Bitcoin message signing. However that's something that can protect your FaucetBOX.com account, using 2FA to block bots attacking your faucet doesn't really make sense... |
|
|
|
Faucetbox is abandoned.
The bots dominate faucetbox
Can you send me IP addresses of confirmed bots? I'll ban them in NastyHosts. |
|
|
|
Kazuldur, cloudflare.txt and incapsula.txt they have ip ranges, I can put other ranges of ips there?
No, these are not IPs to be blocked. You can only put CloudFlare's and Incapsula's IP addresses there (and make sure you put them in correct file). The script uses these ranges to check the legitimacy of headers containing real user's IP address when you're using CloudFlare or Incapsula. You're putting yourself at a security risk if you put other IPs there. In the case of what if it can, those blocked ips can send them to a for example lock.php?
Thanks a lot
You can put IPs to be block in your faucet's admin panel. If you want to change what happens on block, you'll have to edit the "banned" function in main index.php file (it's line 1506 in r63) |
|
|
|
In my FaucetBox account I set security limits - Access Control List.
All was fine some month till today.
Now I see in account ("Hosts that used your API key"):
# IP address Recently requested method Response code (last request) Last access
1. 172.68.11.134 /api/v1/send 401 - Disallowed IP 2016-06-14 16:27:21 MSK
This log renew every second.
It's not my allowed IP.
So my users can't withdraw the money.
Also the strange situation when I try to see LOGIN HISTORY:
Last entrances are mine, but not my IP (IP' shown: 172.68.10.122, 172.68.10.120).
I changed:
password and API key, but situation is the same.
What to do?
Thank you!
These are CloudFlare's IP addresses (FaucetBOX.com uses CloudFlare), so it's a bug on our end. I'm working on it already, sorry. Your account is safe. EDIT: It should show correct IP addresses now. |
|
|
|
NastyHosts.com now returns AS numbers if it could find it: http://v1.nastyhosts.com/52.30.0.1{"status":200,"asn":{"asn":"16509","name":"Amazon.com, Inc."},"hostnames":["ec2-52-30-0-1.eu-west-1.compute.amazonaws.com"],"suggestion":"deny"} You can customize your script to use that for blocking bots. Next version of Faucet in a BOX will probably also use this. |
|
|
|
2.5% paid 4 times is 10% in anyones language...
No it's not and I don't even know how to start explaining such a basic thing... However, that's our official position. We do everything we can to fix the bot problem, but currently bots are smarter and we have no solution. We do plan to release a new version of NastyHosts somewhere in July that we hope will help. If you're not satisfied, you can Withdraw your remaining funds in the Balance tab in your FaucetBOX.com Dashboard. I'll not reply further as your posts use too much offensive language and add no value to the discussion. |
|
|
|
Don't be mistaken here guys.
Faucetbox charges a 2.5% fee to administer payments thru your faucets.
by taking this fee they owe you a duty of care to ensure that your payments are not going to fraudelent claimants.
As they act as a payment processor, they must act immediately to make sure bot's etc do not get to enter your faucet.
the software for this is not that expensive in comparison to what faucetbox charges for a deposit..
I dont expect an answer to this either...
Please show me this software. We as a FaucetBOX.com would love to buy an affordable solution if one exists. However the only ones we know are MaxMind's minFraud and GetIPIntel and both would cost more in a month than we collected as fees since the launch of our service. Also stop making this 2.5% fee such a big deal. 1% of that goes to miners as a transaction fees, the remaining 1.5% barely covers infrastructure costs, it's not even enough for a wage for one developer. |
|
|
|
Trust me Sir, I am no spammer.
Yea, don't worry I have been lucky enough to have only used your service for a few weeks, so my loses have been minimal compared to a lot of people.
Like it or not, you ARE a payment processor, therefore it is your responsibility for faucet owners funds.
can you imagine paypal acting like you are.... hmm
before you excuse yerself... you are both payment processors, both responsible for user funds
We're constantly fighting this. Each release of our script adds something new for bots to work around. For about six months now we're working on a new version of NastyHosts that uses MachineLearning to test users and classify them as bots or not, I hope we'll be able to release it in next month. As a payment processor we're not responsible for bots. We're responsible for handling the payment requests, which we do. The PayPal analogy doesn't hold here, because they don't protect you from someone abusing your e-commerce store or something. If there's a request to process a payment, they'll do that. What you have on PayPal that you don't have on FaucetBOX.com is chargeback, but that's because cryptocurrencies don't support it. As a script creators, we're responsible to do whatever we can and we really try to do that. However I think that you should actually talk to CAPTCHA creators. They're the ones that are responsible for catching bots, aren't they? And FunCaptcha is quite good at that from what I heard... You indicate someone to make custom script?
Here in the forum has someone to make custom script?
It's easy if you know HTML and PHP, you can use our library: https://faucetbox.com/en/php-libraryThere's elbandi's MiniFaucet: https://bitcointalk.org/index.php?topic=333748.0And I think that it wouldn't cost more than 0.5 BTC to hire someone to write a custom script for you. Custom script will always be better that ours. Just as I said, no bot maker will bother to make their bot work with your single faucet, they'll focus on thousands of faucets that use the same script and the same security features. |
|
|
|
Because faucetbox not yet included login email and bitcoin wallet?
Today just put the bitcoin wallet and request payment.
I block a day over 1000 bitcoin wallets, I'm giving up faucetbox.
Faucetbox has no interest in helping anyone.
Faucetbox only want to profit 2.5%.
We won't require email registration for users, that's our main feature. You can always use a custom script to do that. Blocking wallets is pointless, only blocking whole IP networks can help. We're working on a new version of NastyHosts, but it will take time. However many faucets have dealt with bots by using custom captchas, requiring email or just banning networks. Dude, if running a faucet would be easy and hassle free, we wouldn't make FaucetBOX public in the first place, we'd just make hunderds of faucets ourselves. You have to work a lot, monitor your faucet, customize it and implement your own security features. There are no security features that can't be bypassed. The only thing that matter is the cost/benefit ratio of doing that. If we implement something in the main script, bots have enough incentive to work on bypassing it. If you implement something yourself, then no bot will bother to customize it's script just to abuse your faucet. I'm really tired of explaining that over and over again... why am I getting a warning message that you are moderating this thread, and if I don't like it start my own thread...
is this not an open forum ??
I often delete spam messages here. |
|
|
|
No solution exists against bots?
Because nobody talks about it first?
People here like losing money to bots!
There's no automatic solution. Monitor your faucet and ban networks used by bots. |
|
|
|
|
Show Posts
