[Updated 19/Jul/2016] Faucet Owners Against Scammers and Bots

[grosminer]

i just got stepped over by a large amount of bots, thanks faucetbox for the safety limits or my faucet would have been dried in minutes

i've posted the ips on pastebin because there're too many for a single thread post

enjoy

http://pastebin.com/gpAsAgRd

Great list, i already had a lot of those so it confirm my thoughts

Thank you

[catcatcatcaty]

here is a couple of doge bot addresses:
DR4jSyJ6wQAuB9R3M5dgvnxMkKsG6fzvpk
DJDmXP78E9fAu8CoakJ1HGc5FfH3FNo5t2

[alfaboy23]

i just got stepped over by a large amount of bots, thanks faucetbox for the safety limits or my faucet would have been dried in minutes

i've posted the ips on pastebin because there're too many for a single thread post

enjoy

http://pastebin.com/gpAsAgRd

That IP is also in my denied list and those are definitely coming from Ru55!a.
Take a look at this:




The other IPs from your list are from Zurich and I'm still identifying the rest.
The others are from US, Ukraine and Gibraltar.

[Gifted]

The bot programs uses a old Firefox browser !  block Firefox like i did! Alfaboy's code
As you can see here where the owner posted his program.   http://thebot.net/threads/coincollector-v4-multi-faucet-bot.316973/

Code:

// Blocks Browser Multiple 
$get_name_browser = $_SERVER['HTTP_USER_AGENT']; // Get Name Broswer
$block_browser    = array("Avant Browser","Firefox","Yandex", "Opera","ELinks","SeaMonkey","Chromium","Iceweasel","Konqueror","WebKit Nightly","Iron","Pale Moon","Epiphany"); // Name Broswer Block

foreach($block_browser as $new){

    if(preg_match("/".$new."/",$get_name_browser)){
        die("<h2>Browser not supported! Use----> Google Chrome</h2>");    
    }

}
//  End Blocks Browser Multiple 

[xnd]

block firefox? i'm receiving 32% visitors with firefox, not sure if this is the right thing to do

anyway, here's an update. i see mexico and chile has joined the bot network :-)

http://pastebin.com/4fzq0VKE

anyway, whoever is doing this, F U! you're wasting A LOT of resources for pennies. idiot.

[bkxpress2015]

Awesome thread! Thank you.

[Pixmartz]

Hello all, i need ask, how to block visitor from United States, Russia, Mexico, Ukraine for my faucet?

I need help, my faucet attack bots, 0,02500000 out in 2 days.

[sabotag3x]

Hello all, i need ask, how to block visitor from United States, Russia, Mexico, Ukraine for my faucet?

I need help, my faucet attack bots, 0,02500000 out in 2 days.

Visitors from EUA probably is from QuadraNet VPN, just try to block the IP range.. I posted 2 ranges from QuadraNet here, I think it's on OP too..
Blocking a country it's not a good idea since they use VPN from all places in the world... try to focus on block IP range

edit: enable NastyHosts funcion if you are using faucetbox and write US and you will block the United States.. RU = Russia maybe, UK = Ukrania, MX = Mexico.. not sure, you have to check it

[xnd]

Hello all, i need ask, how to block visitor from United States, Russia, Mexico, Ukraine for my faucet?

I need help, my faucet attack bots, 0,02500000 out in 2 days.

i quess iptables is the best so it doesn't use the httpd resources (conf/htaccess) to block the bots, depends on your access to the webserver

[sabotag3x]

⌨IMPORTANT

So I was learning more about NastyHosts
And I find this site https://www.ultratools.com/tools/asnInfo
For example if I put the IP of QuadraNet: 104.223.3.1
I will get this:

AS8100
Country: US
Registration Date: 2009-10-22
Registrar: arin
Owner: ASN-QUADRANET-GLOBAL - QuadraNet, Inc, US

And we just need to put the ASN(just 8100) here on the second option




* MAGIC *

LIST:

OVH - AS16276
QuadraNet - AS8100
QuadraNet - AS62639
APOLLO - AS12578
H1ASN - AS6870
SAGONET - AS21840
TELKOMSEL - AS23693
VIETEL - AS7552
COGENT - AS174
NJIIX - AS19318
ENZUINC - AS18978
IKOULA - AS21409
AS26642 - AFAS - AnchorFree Inc., US
AS20473 - AS-CHOOPA - Choopa, LLC, US
AS11508 - AS-CHOOPA2 - Choopa, LLC, US
AS15418 - FASTHOSTS-INTERNET Fasthosts Internet Ltd. Gloucester, UK., GB
AS47869 - NETROUTING-AS , NL
AS33970 - OPENHOSTING , GB (AKA M247)
AS202109 - DIGITALOCEAN-ASN-2 , GB
AS133165 - DIGITALOCEAN-AS-AP Digital Ocean, Inc., SG
AS62567 - DIGITALOCEAN-ASN-NY2 - Digital Ocean, Inc., US
AS393406 - DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc., US
AS202018 - DIGITALOCEAN-ASN-3 , NL
AS60567 - DATACLUB-SE , SE
AS55536 - PSWITCH-HK PACSWITCH GLOBAL IP NETWORK, HK (AKA Pacswitch)
AS63949 - LINODE-AP Linode, LLC, SG
AS17025 - ZAYO-CUSTOMER-17025 - Zayo Bandwidth Inc, US (AKA LINODE)
AS16265 - LEASEWEB-NETWORK Amsterdam, Netherlands, NL
AS13213 - UK2NET-AS , GB
AS46652 - SERVERSTACK-ASN - ServerStack, Inc., US
AS6830 - LGI-UPC formerly known as UPC Broadband Holding B.V., AT (AKA Softronics)
AS29119 - SERVIHOSTING-AS AireNetworks - StackScale, ES
AS32164 - SECURED-SERVERS - SECURED SERVERS LLC, US
AS203523 - VIRTONO-NETWORKS , RO
AS16509 - AMAZON-02 - Amazon.com, Inc., US
AS38895 - AMAZON-AS-AP Amazon.com Tech Telecom, JP
AS39111 - ADSI-AS , IE (AKA Amazon)
AS14618 - AMAZON-AES - Amazon.com, Inc., US

Here are some with I got searching for "VPN"
AS23762 - VPNSOLUTIONS-AU VPNsolutions Pty Ltd, AU
AS51432 - BEEVPN , ES
AS25186 - TRANSIT-VPN-AS France Telecom Transpac_s Transit VPN network, FR
AS38814 - ASIAMAX-HK-EA-AP Asiamax Technology Limited VPN Service Provider Hong Kong, HK
AS20448 - VPNTRANET-LLC - VPNtranet, LLC., US
AS12582 - TSF-DATANET-NGD-AS TSF MPLS VPN Services, FI

Ready to copy and paste:

Code:

16276, 8100, 62639, 12578, 6870, 21840, 23693, 7552, 174, 19318, 18978, 21409, 23762, 51432, 25186, 38814, 20448, 12582, 26642, 20473, 11508, 15418, 47869, 33970, 202109, 133165, 62567, 393406, 202018, 60567, 55536, 63949, 17025, 16265, 13213, 46652, 6830, 29119, 32164, 203523, 16509, 38895, 39111, 14618, 14061, 201229, 394362, 35340, 200130, 5540, 7172, 48951, 29761, 28787, 7155, 46536, 40305, 59729, 34185, 21100, 9009, 54500, 18779, 21321, 23133, 31251, 24203, 13188, 6849, 7974, 32199, 3462, 55836, 16345, 24086, 7018

Please note Digital Ocean have a lot of different ASN and I can't find all.. and this one can't be found by name, just by IP.. if someone have more ISP names, VPN IP's or something, please help!
another useful site: http://www.iplocationtools.com/192.241.189.244.html
Here you can check where the IP come from..
You can google like this too: digital ocean site:iplocationtools.com
and find more IP's

edit: more digital ocean+ovh+quadranet+more, already on copy and paste code
AS14061 - DIGITALOCEAN-ASN - Digital Ocean, Inc., US
AS201229 - DIGITALOCEAN-GERMANY , DE
AS394362 - DIGITALOCEAN-ASN-CA1 - Digital Ocean, Inc., US
AS135340 - DIGITALOCEAN-AS-IN Digital Ocean, Inc., US
AS200130 - DIGITALOCEAN-ASN-1 , EU
AS35540 - OVH-TELECOM , FR
AS57172 - GLOBALLAYER , NL (AKA AIRVPN)
AS48951 - ASN-TSI-IAS Internet and VPN Service Provider, DE
AS29761 - AS-QUADRANET - QuadraNet, Inc, US
edit2:
AS28787 - BAKINTER-AS Bakinternet ISP, Azerbaijan, AZ
AS7155 - WB-DEN2 - ViaSat,Inc., US
AS46536 - VIASAT-CARLSBAD - ViaSat, Inc., US
AS40305 - WB - ViaSat,Inc., US
AS59729 - ITL-BG , BG
AS34185 - ITL-VL-AS , RU
AS21100 - ITLDC-NL , UA
AS9009 - M247 , GB
AS54500 - 18779 - EGIHosting, US
AS18779 - EGIHosting, US
AS21321 - ARETI-AS , GB
AS23133 - ARETI-US-AS - Areti Internet LLC, US
AS31251 - NETGUARD-AS Falco Networks BV provides; Broadband, Voice, Data, Internet, NL
AS24203 - NAPXLNET-AS-ID PT Excelcomindo Pratama (Network Access Provider), ID
AS13188 - BANKINFORM-AS , UA
AS6849 - UKRTELNET , UA
AS17974 - TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, ID
AS132199 - GLOBE-MOBILE-5TH-GEN-AS Globe Telecom Inc., PH
AS3462 - HINET Data Communication Business Group, TW
AS55836 - RELIANCEJIO-IN Reliance Jio Infocomm Limited, IN
AS16345 - BEE-AS Russia, RU
AS24086 - VIETTEL-AS-VN Viettel Corporation, VN
AS7018 - ATT-INTERNET4 - AT&T Services, Inc., US

PLUS: I found this list https://www.enjen.net/asn-blocklist/names.php
There you can find all quaranet, ovh, digital ocean and more, help us to grow this list!

[felicita]

lol if you wanna test my VPN/TOR/Proxy API then contact me !
your way to block bots is a bit hard you have to add many ASNs ^^


offer:
https://bitcointalk.org/index.php?topic=1577331.0


kind regards

[maxibitcoin]

⌨IMPORTANT

So I was learning more about NastyHosts
And I find this site https://www.ultratools.com/tools/asnInfo
For example if I put the IP of QuadraNet: 104.223.3.1
I will get this:

AS8100
Country: US
Registration Date: 2009-10-22
Registrar: arin
Owner: ASN-QUADRANET-GLOBAL - QuadraNet, Inc, US

And we just need to put the ASN(just 8100) here on the second option

https://i.imgur.com/YJ1Y9Ll.png

https://www.drupal.org/files/shia-magic.gif
* MAGIC *

LIST:

OVH - AS16276
QuadraNet - AS8100
QuadraNet - AS62639
APOLLO - AS12578
H1ASN - AS6870
SAGONET - AS21840
TELKOMSEL - AS23693
VIETEL - AS7552
COGENT - AS174
NJIIX - AS19318
ENZUINC - AS18978
IKOULA - AS21409
AS26642 - AFAS - AnchorFree Inc., US
AS20473 - AS-CHOOPA - Choopa, LLC, US
AS11508 - AS-CHOOPA2 - Choopa, LLC, US
AS15418 - FASTHOSTS-INTERNET Fasthosts Internet Ltd. Gloucester, UK., GB
AS47869 - NETROUTING-AS , NL
AS33970 - OPENHOSTING , GB (AKA M247)
AS202109 - DIGITALOCEAN-ASN-2 , GB
AS133165 - DIGITALOCEAN-AS-AP Digital Ocean, Inc., SG
AS62567 - DIGITALOCEAN-ASN-NY2 - Digital Ocean, Inc., US
AS393406 - DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc., US
AS202018 - DIGITALOCEAN-ASN-3 , NL
AS60567 - DATACLUB-SE , SE
AS55536 - PSWITCH-HK PACSWITCH GLOBAL IP NETWORK, HK (AKA Pacswitch)
AS63949 - LINODE-AP Linode, LLC, SG
AS17025 - ZAYO-CUSTOMER-17025 - Zayo Bandwidth Inc, US (AKA LINODE)
AS16265 - LEASEWEB-NETWORK Amsterdam, Netherlands, NL
AS13213 - UK2NET-AS , GB
AS46652 - SERVERSTACK-ASN - ServerStack, Inc., US
AS6830 - LGI-UPC formerly known as UPC Broadband Holding B.V., AT (AKA Softronics)
AS29119 - SERVIHOSTING-AS AireNetworks - StackScale, ES
AS32164 - SECURED-SERVERS - SECURED SERVERS LLC, US
AS203523 - VIRTONO-NETWORKS , RO
AS16509 - AMAZON-02 - Amazon.com, Inc., US
AS38895 - AMAZON-AS-AP Amazon.com Tech Telecom, JP
AS39111 - ADSI-AS , IE (AKA Amazon)
AS14618 - AMAZON-AES - Amazon.com, Inc., US

Here are some with I got searching for "VPN"
AS23762 - VPNSOLUTIONS-AU VPNsolutions Pty Ltd, AU
AS51432 - BEEVPN , ES
AS25186 - TRANSIT-VPN-AS France Telecom Transpac_s Transit VPN network, FR
AS38814 - ASIAMAX-HK-EA-AP Asiamax Technology Limited VPN Service Provider Hong Kong, HK
AS20448 - VPNTRANET-LLC - VPNtranet, LLC., US
AS12582 - TSF-DATANET-NGD-AS TSF MPLS VPN Services, FI

Ready to copy and paste:

Code:

16276, 8100, 62639, 12578, 6870, 21840, 23693, 7552, 174, 19318, 18978, 21409, 23762, 51432, 25186, 38814, 20448, 12582, 26642, 20473, 11508, 15418, 47869, 33970, 202109, 133165, 62567, 393406, 202018, 60567, 55536, 63949, 17025, 16265, 13213, 46652, 6830, 29119, 32164, 203523, 16509, 38895, 39111, 14618

Please note Digital Ocean have a lot of different ASN and I can't find all.. and this one can't be found by name, just by IP.. if someone have more ISP names, VPN IP's or something, please help!
another useful site: http://www.iplocationtools.com/192.241.189.244.html
Here you can check where the IP come from..
You can google like this too: digital ocean site:iplocationtools.com
and find more IP's

thanks for ASN list 

[mork71421]

Hi,

I try to apply this tutoriel: http://bit.makejar.com/labs/anti-bot-links-500/install.php

But my page becomes inaccessible.

Why?

[5ub_zer0]

i just got stepped over by a large amount of bots, thanks faucetbox for the safety limits or my faucet would have been dried in minutes

i've posted the ips on pastebin because there're too many for a single thread post

enjoy

http://pastebin.com/gpAsAgRd

That IP is also in my denied list and those are definitely coming from Ru55!a.
Take a look at this:




The other IPs from your list are from Zurich and I'm still identifying the rest.
The others are from US, Ukraine and Gibraltar.

Every Network with Contact: Truscov Ilya Igoreviych should be banned ..

[sabotag3x]

Hi,

I try to apply this tutoriel: http://bit.makejar.com/labs/anti-bot-links-500/install.php

But my page becomes inaccessible.

Why?

I think it's something wrong with the install guide, I have the same issue, don't remember what I do, maybe I installed the antibot200 and make changes to 500, try it

[NeedIfFindIt]

Hi,

I try to apply this tutoriel: http://bit.makejar.com/labs/anti-bot-links-500/install.php

But my page becomes inaccessible.

Why?

I think it's something wrong with the install guide, I have the same issue, don't remember what I do, maybe I installed the antibot200 and make changes to 500, try it

500 must be done on a clean install.

Enable errors in your config and let me know what is the error.

[FaucetRank.com]

Hi,

I try to apply this tutoriel: http://bit.makejar.com/labs/anti-bot-links-500/install.php

But my page becomes inaccessible.

Why?

I think it's something wrong with the install guide, I have the same issue, don't remember what I do, maybe I installed the antibot200 and make changes to 500, try it

500 must be done on a clean install.

Enable errors in your config and let me know what is the error.

can you please post the download link of antibot 500 .
what is new in antibot 500 script ?

[sabotag3x]

Hi,

I try to apply this tutoriel: http://bit.makejar.com/labs/anti-bot-links-500/install.php

But my page becomes inaccessible.

Why?

I think it's something wrong with the install guide, I have the same issue, don't remember what I do, maybe I installed the antibot200 and make changes to 500, try it

500 must be done on a clean install.

Enable errors in your config and let me know what is the error.

can you please post the download link of antibot 500 .
what is new in antibot 500 script ?

Here's the link to the antibot 500
http://bit.makejar.com/labs/anti-bot-links-500/install.php
It's more powerful against some proxies too (not at all)

[Salmen]

Most bots use iFrames to switch from faucet to faucet.
There is a solution to block appear in a frame using PHP.

Code:

header('X-Frame-Options: SAMEORIGIN');

or (blocks the domain itself)

Code:

header("X-Frame-Options: DENY");

The code should be added before echo.
Most new browser respect this thing.

I would prefer to use SAMEORIGIN, in case you have iframes which is linked to the same domain.

ATTENTION: By using this code, your faucet isn't working in a faucet rotator. Which means, you will lost new visitors.


Cheers
Salmen

[Gifted]

Most bots use iFrames to switch from faucet to faucet.
There is a solution to block appear in a frame using PHP.

Code:

header('X-Frame-Options: SAMEORIGIN');

or (blocks the domain itself)

Code:

header("X-Frame-Options: DENY");

The code should be added before echo.
Most new browser respect this thing.

I would prefer to use SAMEORIGIN, in case you have iframes which is linked to the same domain.

ATTENTION: By using this code, your faucet isn't working in a faucet rotator. Which means, you will lost new visitors.


Cheers
Salmen

I  have something similar but it doesn't stop them .. this is what i use for Iframe breaking

Code:

<script type="text/javascript">
if ( window.self !== window.top ) {
    window.top.location.href=window.location.href;
}
</script>