But it will only check against "flagged" IPs.

I have been thinking about the opposite. Something like a members only faucet. IP and wallet will be checked at sign up and at every claim ever after. It would allow the faucet to "bind" a wallet to the ISP of the user.



I found another service like NastyHosts and it is really amazing. I combine it with NastyHosts. I've noticed that NH sometimes passed an obvious VPN while the other service didn't.

Can you go into your database and show some of the IPs that were being used to claim?

If you could provice a few IPs we might be able to help preventing the scammers (or bots) as you call them from coming back.

Same here. Sorry for flaming.
Just wanted to help others.

It's so easy to walk away without giving proof.

"Hey everybody, my mission is to warn people about a coming alien invasion tomorrow. I'm not here to make you feel safe. There's no proof. But believe me and my word, it is coming!"


You can use all the fancy words and explanations. Without proof it means nothing.


If I reached one faucet owner with my original post; If I have helped one faucet owner to prevent on ore more scammers of claiming, but goal has been achieved.

BitBustah out.

Sure, I'll accept this answer as being true. Now again, show me proof. Show it to me. You can't. Again, sorry.

OCR = Hard to do when the characters are distorted, rotated, blurred, ...
"Find woman/rotate animal" = True. Have you seen the head images? They are NEVER thesame. They are of 3D heads; They always have a different angle of view, size, color, sharpness... They are never thesame. Try printscreening some of them and compare them. Same with the animals. Never thesame. Oh, I forgot mirrored.

"Listen to those sounds" = Not all words are clear. High fail rate in this.

"reCaptcha neural net" = Yeah sure. Services offering to solve them.


Show it to me.

A bot that uses a service with input from people isn't a bot anymore. I knew about this one, thanks.

It messes me up that the moderators of such a great forum on such a great topic (bitcoin) allow services like these to be advertised alongside the faucet owners. It's like 2 sides trying to fight eachother.

One side is offering ways to drain faucets. One side is trying to keep out scammers that drain those faucets. So sad.

Sorry for being harsh and impolite. I'm really not like this in real life. The goal was indeed to change the way this is being discussed. Thank you for seeing this. I hope others see it too.




Thank you for agreeing with me. Let's hope others will understand this too.

I'll put my money where my mouth is. Show me a script or application that can bypass Recaptcha. Your cred is on the line here. Show me.

You cant. Sorry.


Edited: Anything will do. I (and I guess everyone on this forum) will be easily satisfied. A script, bot, ... anything will do.

Edited again: It's easy to say there is without proof. Hey, did you see that major UFO over the United States yesterday? I can't prove it, but it was really there. Believe me.


I'm not replying to these messages anymore because it is a total waste of time.

Two last things:

I do not see one good use for using CloudFlare. What is this "bot protection"? Do you guys understand it?

CloudFlare will stop "bots" and DDOS attacks. It will stop requests from IPs and related IPs, but only when there are too many requests coming from them within a short period of time.

There's no proof that VPN users will be blocked.






A few days ago I had 240+ VPN users on my faucet. I watched many wallets using the FaucetBOX check thinghy. A LOT of major faucets were being drained. It's not only the small faucets that are being hit.

I need to unwatch this topic because I'm getting fed up with some of the nonsense I'm reading here. I believe in democracy and I respect everyones opinion. But I also believe that I can call it nonsense.


---

WHAT YOU CAN DO AS A FAUCET OWNER

As a faucet owner you need to monitor the IPs that were used to claim, every day. This _will_ take time.
Anti-bot links, MULTIPLE captchas, asking for email addresses... It doesn't matter.


You. Need. To. Check. IP. Addresses. You can not do that using the FaucetBOX script; You need to enter the MySQL database and overview the IPs manually. Or create a simple script like I did.


Once you have those IPs, you need to do some checks: To which company belong these IPs?
If they belong to an ISP, it's OK. If they belong to a webhosting company, cloud service company, VPN company, ... It's not OK.


You need to find out which IPs belong to that company and block them ALL using the IP to CIDR option. You can use the RIPE, ARIN, ... databases to find out which IP ranges belong to which companies. RIPE, ARIN etc are the "companies" that run the internet. They have ALL the information you need. No need to pay other companies like MaxMind. You can do that yourself.


Just blocking the hostname(s) is NOT ENOUGH. The hostname is being fetched from the NastyHosts service. If NastyHosts is offline -some websites go offline sometimes- the host blocking measurement is not working. I tested it myself. That's why you need to block hostnames AND IP addresses.


After you have done that, you will need to block the wallets that were used by these scammers. Again, you will need to go into your MySQL database or use a script. If VPN users have to create new wallets over and over they will earn less and need to set a lower withdrawal amount on FaucetBOX. They will also need to pay more fees. That's why ALL faucet owners should do their own "detection" instead of relying on other faucet owners to provide scamming wallets, IPs and hostnames. Running a decent faucet is HARD work.



ABOUT VPNs, PROXIES AND BOTS

I've read here that some people still allow VPN users because their ad income will go down. Personally I think that's a retarded reason.

VPN users and proxy users have thesame goal: Hide their actual IP address. They do this just to steal YOUR money. VPN users steal 2 times: Once from the faucet owner, once from the advertisers that are using the faucet.

Ad services (like fi Bee-Ads and others) DO profit from VPN traffic: The ads will get more views, sometimes even more "clicks" and the advertisers budget will dry up faster.
Which all results into: The ad service itself will make more money from its advertisers. That's the world we live in. I think that's totally unfair to advertisers.


The whole "bots"-discussion is getting out of hand and totally ridiculous. This is the last time that I'm saying it: A bot is an automated script or application AND IT CAN NOT bypass the captchas, wether it is FunCaptcha, Recaptcha, ... If you are reading this and you are not agreeing; Again and again: SHOW ME PROOF. I have years and years of experience in programming. It can not be done. Show me proof, I'm begging you, please. I will pay you for it.

I keep spotting and reading about new faucet owners with less or no programming knowledge who believe that "bots" are bypassing their captchas etc. Come on people, you really believe this?

Bots can't do it. It's simple. The answer is on this forum. The "bots" are actual people solving the captchas.The services section of this forum is full of captcha solving offers. The "official" explanation is that these captchas are being entered for testing purposes. Come one people, how stupid are you if you believe this? Just imaging: Google is paying in BTC to test their captchas? If you believe this, you shouldn't be allowed to handle money.

I've read somewhere: "People can not change their IPs within seconds. It must be bots."
Again, ridiculous. A VPN user can change IPs within a second. New IP, new wallet and you're good to go. Using a script or application to claim within seconds DOES NOT MAKE YOU A BOT. A bot is an automated script or application that works WITHOUT user input.



ABOUT FAUCETBOX

Don't you guys just blame FaucetBOX; They are just a "micro wallet" which is temporarily accumulating the satoshi. I have never had one problem with them. All this sh*t about API keys getting stolen is bullsh*t. If your API key was stolen and you think FaucetBOX is behind it than you need to show some proof. Perhaps your site/server is insecure and your key got stolen there?

Read point one. You are responsable for your faucets security.

- Keep an OFFLINE file with all your passwords.
- NEVER use thesame password twice.
- Create LONG and DIFFICULT PASSWORDS.



FINALLY

Running a faucet isn't just putting a script up and watch the money come in. It takes work, work, work... And still I'm not breaking even.

You need to look into yourself and find out if you are a faucet owner for the money or for the fun.

My goal is to earn 1 BTC this year. I'm not willing to scam ANYONE to get it. I still need to sleep at night.

My 2 cents.

PM sent.

Some times it might have been taking longer but I have never missed a payment from FaucetBOX. I don't really understand why people are complaining.. Never had one problem with FaucetBOX...? :s

Maybe your admin password was stolen and the hacker used the "send money" function from the script.

This doesn't mean your API key was stolen.

Haven't had any time or motivation so far. Have a long holiday coming up. Maybe then.

Why didn't you disable your faucet?
Or temporarily disabled your webserver? You could have renamed your index.php file to something else and put up another index.php file?

Running a site/faucet isn't just putting up a script and watch the money roll in. It's hard work.

I'm satisfied with the way FaucetBOX works. Sure, there's a fee. But nothing is free you know.

What's wrong these days? So many faucets are out of funds. :s

Oh I see. I do that too.

Is it martingale inspired?