[Updated 19/Jul/2016] Faucet Owners Against Scammers and Bots

[nawaraj]

I think there are 4 index.php in the script . I have to create ".htaccess" near to first index.php where libs located or I have to create this on currently using template.

You Shoould create the .htaccess file into the main/root directory. I mean next to the first index.php (not the templates index.php).

Remember to check others ways to block attacks by .htaccess file in the internet.

There are many implementations to make in this file aiming to get a higger security.


It is a powerfull resource if you know how to use it.

I got it.

I want to ask another question, If nastyhost catch supencious ( ip , site & btc address ) then where it will appear , It wil appear on my admin page or there nastyhost site.

[NeedIfFindIt]

Those antibot links are a puzzle made to be difficult for machines to solve, but easy for humans.

In other words, they're a captcha, except they're more annoying because the user has to hunt around all over page. So why not just use a second captcha?

Wrong!

Second captcha means extra 50 satoshi per claim for the bot user/creator.

The bot creators can't build single-snapshot captcha solving service based on IQ puzzles.

And the links are annoying if they are too many and spread all over the website.

The instructions say 3-5 links. Using Less or More will weaken the protection.

Don't forget to create your own puzzles. That way there will be no "universal solution" to take down all the faucets.

Also there is version 201

[nawaraj]

Those antibot links are a puzzle made to be difficult for machines to solve, but easy for humans.

In other words, they're a captcha, except they're more annoying because the user has to hunt around all over page. So why not just use a second captcha?

Wrong!

Second captcha means extra 50 satoshi per claim for the bot user/creator.

The bot creators can't build single-snapshot captcha solving service based on IQ puzzles.

And the links are annoying if they are too many and spread all over the website.

The instructions say 3-5 links. Using Less or More will weaken the protection.

Don't forget to create your own puzzles. That way there will be no "universal solution" to take down all the faucets.

Also there is version 201

I see in the new version, no thing is changes as compare to old version.

[misterbit]

It left a new version?

[NeedIfFindIt]

Those antibot links are a puzzle made to be difficult for machines to solve, but easy for humans.

In other words, they're a captcha, except they're more annoying because the user has to hunt around all over page. So why not just use a second captcha?

Wrong!

Second captcha means extra 50 satoshi per claim for the bot user/creator.

The bot creators can't build single-snapshot captcha solving service based on IQ puzzles.

And the links are annoying if they are too many and spread all over the website.

The instructions say 3-5 links. Using Less or More will weaken the protection.

Don't forget to create your own puzzles. That way there will be no "universal solution" to take down all the faucets.

Also there is version 201

I see in the new version, no thing is changes as compare to old version.

The difference is in the antibotlinks.php file (better compatibility, better randomness).

[nawaraj]

Those antibot links are a puzzle made to be difficult for machines to solve, but easy for humans.

In other words, they're a captcha, except they're more annoying because the user has to hunt around all over page. So why not just use a second captcha?

Wrong!

Second captcha means extra 50 satoshi per claim for the bot user/creator.

The bot creators can't build single-snapshot captcha solving service based on IQ puzzles.

And the links are annoying if they are too many and spread all over the website.

The instructions say 3-5 links. Using Less or More will weaken the protection.

Don't forget to create your own puzzles. That way there will be no "universal solution" to take down all the faucets.

Also there is version 201

I see in the new version, no thing is changes as compare to old version.

The difference is in the antibotlinks.php file (better compatibility, better randomness).

If difference is in the antibotlinks.php file then I can replace this with new file only.

[grosminer]

Can someone explain this:



Jokertimes faucet prizes are:
2500 satoshi (0.11%)
1000 satoshi (1.07%)
750 satoshi (2.15%)
500 satoshi (96.67%)

And Ref % is 40%

How come this address can get 1000 sats as referral every time?!

[NeedIfFindIt]

Can someone explain this:



Jokertimes faucet prizes are:
2500 satoshi (0.11%)
1000 satoshi (1.07%)
750 satoshi (2.15%)
500 satoshi (96.67%)

And Ref % is 40%

How come this address can get 1000 sats as referral every time?!

Jokertimes is using microfaucet. To save server resources microfaucet is accumulating the ref rewards until they become at least 1000.

Assuming that 96% of the claims are 500 sat then we have:
500-sat claim = 200 sat ref
+
500-sat claim = 200 sat ref
+
500-sat claim = 200 sat ref
+
500-sat claim = 200 sat ref
+
500-sat claim = 200 sat ref
ref = 1000 ... time for ref payout

[avelina]

Real AntiBot Links

Download & unpack:
http://bit.makejar.com/labs/anti-bot-links-200/antibotlinks.zip

Code:

Files to add:
/libs/antibotlinks.php


Files to edit:
/index.php
/templates/*theme-name*/index.php


Ok, let's start.

First make a backup of your faucet (everything could go wrong, better safe than sorry).

Then

Copy:
antibotlinks.php

To:
/libs/antibotlinks.php


Now you will need to edit 2 files. I suggest using Notepad++ https://notepad-plus-plus.org/ to edit files but any good editor will do the job.
This is based on FB R60 but should work with newer/older versions.

Open:
/index.php

Find:
        $data['captcha_info'] = $captcha;

add after:
        # AntiBotLinks
        require_once('libs/antibotlinks.php');
        $antibotlinks = new antibotlinks(true);// true if GD is on on the server, false is less secure
        if (array_key_exists('address', $_POST)) {
          if (!$antibotlinks->check()) {
            $antibotlinks->generate(5, true);// number of links once they fail to solve min 3 - max 5, the second param MUST BE true
          }
        } else {
          $antibotlinks->generate(3);// initial number of links min 3 - max 5
        }


Find:
           $data['captcha_valid'] && 

add after:

           # AntiBotLinks
           $antibotlinks->is_valid() &&
           

Open:
/templates/*theme-name*/index.php

Find:
</head>

Add before:
<?php
# AntiBotLinks START
?>
<script style="text/javascript">
$(function() {
  var clicks = 0;
  $('.antibotlinks').click(function() {
    clicks++;
    $('#antibotlinks').val($('#antibotlinks').val()+' '+$(this).attr('rel'));
    if(clicks == <?php echo $antibotlinks->get_link_count(); ?>) {
      var rand = Math.floor((Math.random() * clicks) + 1);
      var button = '<input type="submit" class="btn btn-primary btn-lg" value="Get Reward!">';
      var z=0;
      $('.antibotlinks').each(function(){
        z++;
        if (z==rand) {
          $(this).replaceWith(button);
        }
      });
      
    }
    $(this).hide();
    return false;
  });
});
</script>
<?php
# AntiBotLinks END
?>


Find:
                            <?php if(!$data["captcha_valid"]): ?>
                            <p class="alert alert-danger">Invalid captcha code!</p>
                            <?php endif; ?>


Add after (the input field must be between <form> and </form>):

<?php
# AntiBotLinks START
?>
                            <input type="hidden" name="antibotlinks" id="antibotlinks" value="" />
                            <?php if(!$antibotlinks->is_valid()): ?>
                            <p class="alert alert-danger">Invalid AntiBot verification!</p>
                            <?php endif; ?>
<?php
# AntiBotLinks END
?>


Somewhere between <form> and </form> add (you need to do it 5 times, this is where the links will appear):

<?php
# AntiBotLinks START
?>
                        <?php echo $antibotlinks->show_link(); ?>
<?php
# AntiBotLinks END
?> 

And finally remove the default CLAIM button :)

This doesn't display "Please click on the Anti-Bot links in the following order" on the page. but the anti bot links does.

[NeedIfFindIt]

Real AntiBot Links

Download & unpack:
http://bit.makejar.com/labs/anti-bot-links-200/antibotlinks.zip

Code:

Files to add:
/libs/antibotlinks.php


Files to edit:
/index.php
/templates/*theme-name*/index.php


Ok, let's start.

First make a backup of your faucet (everything could go wrong, better safe than sorry).

Then

Copy:
antibotlinks.php

To:
/libs/antibotlinks.php


Now you will need to edit 2 files. I suggest using Notepad++ https://notepad-plus-plus.org/ to edit files but any good editor will do the job.
This is based on FB R60 but should work with newer/older versions.

Open:
/index.php

Find:
        $data['captcha_info'] = $captcha;

add after:
        # AntiBotLinks
        require_once('libs/antibotlinks.php');
        $antibotlinks = new antibotlinks(true);// true if GD is on on the server, false is less secure
        if (array_key_exists('address', $_POST)) {
          if (!$antibotlinks->check()) {
            $antibotlinks->generate(5, true);// number of links once they fail to solve min 3 - max 5, the second param MUST BE true
          }
        } else {
          $antibotlinks->generate(3);// initial number of links min 3 - max 5
        }


Find:
           $data['captcha_valid'] && 

add after:

           # AntiBotLinks
           $antibotlinks->is_valid() &&
           

Open:
/templates/*theme-name*/index.php

Find:
</head>

Add before:
<?php
# AntiBotLinks START
?>
<script style="text/javascript">
$(function() {
  var clicks = 0;
  $('.antibotlinks').click(function() {
    clicks++;
    $('#antibotlinks').val($('#antibotlinks').val()+' '+$(this).attr('rel'));
    if(clicks == <?php echo $antibotlinks->get_link_count(); ?>) {
      var rand = Math.floor((Math.random() * clicks) + 1);
      var button = '<input type="submit" class="btn btn-primary btn-lg" value="Get Reward!">';
      var z=0;
      $('.antibotlinks').each(function(){
        z++;
        if (z==rand) {
          $(this).replaceWith(button);
        }
      });
      
    }
    $(this).hide();
    return false;
  });
});
</script>
<?php
# AntiBotLinks END
?>


Find:
                            <?php if(!$data["captcha_valid"]): ?>
                            <p class="alert alert-danger">Invalid captcha code!</p>
                            <?php endif; ?>


Add after (the input field must be between <form> and </form>):

<?php
# AntiBotLinks START
?>
                            <input type="hidden" name="antibotlinks" id="antibotlinks" value="" />
                            <?php if(!$antibotlinks->is_valid()): ?>
                            <p class="alert alert-danger">Invalid AntiBot verification!</p>
                            <?php endif; ?>
<?php
# AntiBotLinks END
?>


Somewhere between <form> and </form> add (you need to do it 5 times, this is where the links will appear):

<?php
# AntiBotLinks START
?>
                        <?php echo $antibotlinks->show_link(); ?>
<?php
# AntiBotLinks END
?> 

And finally remove the default CLAIM button :)

This doesn't display "Please click on the Anti-Bot links in the following order" on the page. but the anti bot links does.

Follow the instructions here https://bitcointalk.org/index.php?topic=1200700.msg12719086#msg12719086

[avelina]

Real AntiBot Links

Download & unpack:
http://bit.makejar.com/labs/anti-bot-links-200/antibotlinks.zip

Code:

Files to add:
/libs/antibotlinks.php


Files to edit:
/index.php
/templates/*theme-name*/index.php


Ok, let's start.

First make a backup of your faucet (everything could go wrong, better safe than sorry).

Then

Copy:
antibotlinks.php

To:
/libs/antibotlinks.php


Now you will need to edit 2 files. I suggest using Notepad++ https://notepad-plus-plus.org/ to edit files but any good editor will do the job.
This is based on FB R60 but should work with newer/older versions.

Open:
/index.php

Find:
        $data['captcha_info'] = $captcha;

add after:
        # AntiBotLinks
        require_once('libs/antibotlinks.php');
        $antibotlinks = new antibotlinks(true);// true if GD is on on the server, false is less secure
        if (array_key_exists('address', $_POST)) {
          if (!$antibotlinks->check()) {
            $antibotlinks->generate(5, true);// number of links once they fail to solve min 3 - max 5, the second param MUST BE true
          }
        } else {
          $antibotlinks->generate(3);// initial number of links min 3 - max 5
        }


Find:
           $data['captcha_valid'] && 

add after:

           # AntiBotLinks
           $antibotlinks->is_valid() &&
           

Open:
/templates/*theme-name*/index.php

Find:
</head>

Add before:
<?php
# AntiBotLinks START
?>
<script style="text/javascript">
$(function() {
  var clicks = 0;
  $('.antibotlinks').click(function() {
    clicks++;
    $('#antibotlinks').val($('#antibotlinks').val()+' '+$(this).attr('rel'));
    if(clicks == <?php echo $antibotlinks->get_link_count(); ?>) {
      var rand = Math.floor((Math.random() * clicks) + 1);
      var button = '<input type="submit" class="btn btn-primary btn-lg" value="Get Reward!">';
      var z=0;
      $('.antibotlinks').each(function(){
        z++;
        if (z==rand) {
          $(this).replaceWith(button);
        }
      });
      
    }
    $(this).hide();
    return false;
  });
});
</script>
<?php
# AntiBotLinks END
?>


Find:
                            <?php if(!$data["captcha_valid"]): ?>
                            <p class="alert alert-danger">Invalid captcha code!</p>
                            <?php endif; ?>


Add after (the input field must be between <form> and </form>):

<?php
# AntiBotLinks START
?>
                            <input type="hidden" name="antibotlinks" id="antibotlinks" value="" />
                            <?php if(!$antibotlinks->is_valid()): ?>
                            <p class="alert alert-danger">Invalid AntiBot verification!</p>
                            <?php endif; ?>
<?php
# AntiBotLinks END
?>


Somewhere between <form> and </form> add (you need to do it 5 times, this is where the links will appear):

<?php
# AntiBotLinks START
?>
                        <?php echo $antibotlinks->show_link(); ?>
<?php
# AntiBotLinks END
?> 

And finally remove the default CLAIM button :)

This doesn't display "Please click on the Anti-Bot links in the following order" on the page. but the anti bot links does.

Follow the instructions here https://bitcointalk.org/index.php?topic=1200700.msg12719086#msg12719086

I did..can you help me take a look at my files please.

[MyBTT]

Thanks for the open source code.

[BitBustah]

BitBlabber is undergoing it's first "attack". I keep getting a lot of incoming requests from IP addresses 103.228.157.*


Just a heads up to other faucet owners.

[hoop]

It seems that we are caught in a vicious circle.We need to consider in another method.

[FaucetRank.com]

I'll focus on catching bots as well as preventing them.

[BitLuckyX]

IPs suspects:

108.162.216.227
162.158.103.207
141.101.80.93
162.158.103.242
162.158.103.254
141.101.81.91
162.158.103.199
162.158.103.244
141.101.80.100
141.101.80.175
162.158.103.253
141.101.80.101
162.158.103.202
162.158.103.251
162.158.103.208
141.101.81.175
141.101.81.174
141.101.81.93
162.158.103.210
141.101.80.182
141.101.81.180
162.158.103.212
162.158.103.252
162.158.103.201
162.158.103.200
141.101.81.95
141.101.81.173
141.101.81.184
162.158.103.243
141.101.81.178

[misterbit]

IPs suspects:

108.162.216.227
162.158.103.207
141.101.80.93
162.158.103.242
162.158.103.254
141.101.81.91
162.158.103.199
162.158.103.244
141.101.80.100
141.101.80.175
162.158.103.253
141.101.80.101
162.158.103.202
162.158.103.251
162.158.103.208
141.101.81.175
141.101.81.174
141.101.81.93
162.158.103.210
141.101.80.182
141.101.81.180
162.158.103.212
162.158.103.252
162.158.103.201
162.158.103.200
141.101.81.95
141.101.81.173
141.101.81.184
162.158.103.243
141.101.81.178

Greetings, these IPS are of CloudFlare and obviously behind CloudFlare is a server.

[BitBustah]

Lost over 200.000 satoshis yesterday with a bot attack.

How did they pass the FunCaptcha?! I thought that was impossible?

[FaucetRank.com]

Lost over 200.000 satoshis yesterday with a bot attack.

How did they pass the FunCaptcha?! I thought that was impossible?

They can now days bots are bypassing funcaptcha but it's not funcaptcha fault it's fault of faucet box script .

I recently implemented a auto blok feature in my faucet where a user solve wrong captcha will result in auto block .

[BitLuckyX]

Anti-bots links stop bots?