FaucetRank.com
|
|
October 22, 2015, 02:19:51 PM |
|
I'm having problem after putting above code in my htaccess file
|
| | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | | | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | .SCAMMERS. ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ .EXPOSED. | | | | | | . ▄▄▄▄▄▄▄▄ | | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | |
|
|
|
FaucetWorld
|
|
October 22, 2015, 03:33:02 PM |
|
They're TOR ips and in my new .htaccess I've blocked Russia and China from accessing my faucet. It appears to have stopped them.
Blocking Russia, China or other country will not help you! Only blocking proxies can help with this fight! Thank you guys for great job!
|
|
|
|
mari88
|
|
October 23, 2015, 11:11:22 AM |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root kind regrads
|
|
|
|
FaucetRank.com
|
|
October 23, 2015, 12:29:48 PM |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root kind regrads Probably you did something wrong
|
| | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | | | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | .SCAMMERS. ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ .EXPOSED. | | | | | | . ▄▄▄▄▄▄▄▄ | | | ████ █ ████ █ ████ █ ████ █ ████ █ █ ████ █ █ ████ █ █ ████ █ █ ████ █ ████ █ ████ █ ████ █ ████ | | | |
|
|
|
altcoinhosting
|
|
October 23, 2015, 12:32:44 PM |
|
Nice function... For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution. Thanks for contributing to the community EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this
|
|
|
|
mari88
|
|
October 23, 2015, 12:43:35 PM Last edit: October 23, 2015, 01:43:57 PM by mari88 |
|
i have added your code to my template and nothing happens i can visit faucet with boomproxy.com and i have added your .htaccess to my root kind regrads Probably you did something wrong whooooow what a helping user you spamer i know that something is wrong hat these spamers ...... i have fixxed the problem with CTRL+F5 Script now working thanks. kind regrads
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 01:41:03 PM |
|
Guys... I just developed a very effective proxy server barrier!
My solution has 4 layers of protection.
1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist. 2nd layer: TOR users protection. Almost 100% effective. 3rd layer: Popular and Known Proxy Servers blocked. 4th layer: Unknown proxies blocked by intelligent algorithms.
It works for any site running PHP.
If you are interested in a deal, send me a PM. You can test the service first.
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 23, 2015, 01:52:44 PM |
|
Morning everyone, I have just updated my original post and I am having great luck in the fight against bots! Nice function... For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution. Thanks for contributing to the community EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this Check out step one on my original post, it explains how to block tor exit nodes. Guys... I just developed a very effective proxy server barrier!My solution has 4 layers of protection. 1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist. 2nd layer: TOR users protection. Almost 100% effective. 3rd layer: Popular and Known Proxy Servers blocked. 4th layer: Unknown proxies blocked by intelligent algorithms. It works for any site running PHP. I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page). If you are interested in a deal, send me a PM. https://www.vpnbook.com/webproxyhttp://bitcoin-catcher.com/faucet Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave.
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 01:58:17 PM |
|
Morning everyone, I have just updated my original post and I am having great luck in the fight against bots! Guys... I just developed a very effective proxy server barrier!My solution has 4 layers of protection. 1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist. 2nd layer: TOR users protection. Almost 100% effective. 3rd layer: Popular and Known Proxy Servers blocked. 4th layer: Unknown proxies blocked by intelligent algorithms. It works for any site running PHP. I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page). If you are interested in a deal, send me a PM. https://www.vpnbook.com/webproxyhttp://bitcoin-catcher.com/faucet Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave. No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0
|
|
|
|
AlexAce420 (OP)
Member
Offline
Activity: 155
Merit: 10
|
|
October 23, 2015, 02:05:17 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 02:24:41 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time.
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 23, 2015, 02:36:44 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time. Ah... One more thing. My barrier is producing good stats and logs. In some days I will share the most identified proxies IP list with everyone for free. Give me two or three days.
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 24, 2015, 02:32:47 PM |
|
No problem, friend. I just edited my post and removed the link. Anyways, I'm just trying to trade knowledge. Do not forget that I am helping faucet owners about security questions for free about weeks in this forum... >>> https://bitcointalk.org/index.php?topic=1200700.0I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread? No problem. Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site. About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier. Of course if you buy this knowledge you could share it. I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily. Then I decided that I won't share this for free. To protect my work and make its effective for a long time. Ah... One more thing. My barrier is producing good stats and logs. In some days I will share the most identified proxies IP list with everyone for free. Give me two or three days. Guys... These are the proxy servers and scam IPs that my barrier blocked yesterday. Use for your safe and for free. 162.254.149.195 85.25.201.120 149.210.131.21 159.253.128.175 95.141.187.216 5.13.207.5 52.5.121.103 179.107.42.151 199.115.117.194 216.218.131.173 65.49.14.148 81.95.123.216 199.115.117.242 173.245.65.202 37.27.61.32 162.213.40.198 107.170.17.131 162.243.158.7 95.141.20.199 45.55.49.75 162.243.127.7 122.155.34.42 199.115.117.243 159.253.128.172 46.34.213.220 159.253.128.169 46.23.66.106 188.138.8.70 66.171.228.75 188.166.121.88 188.226.170.140 145.249.150.87 178.255.153.247 207.244.86.211 108.168.239.92 5.14.141.64 103.10.199.38 66.171.228.247 49.213.18.108 104.236.70.228 217.118.23.97 108.168.159.147 50.116.9.34 45.114.116.209 198.7.58.81 46.101.35.224 119.247.191.114 194.169.217.14 46.4.79.135 93.184.65.176 128.199.53.63 144.76.44.114 146.185.28.178 51.39.128.155 190.248.68.138 173.245.65.88 54.176.17.88 31.47.127.155 38.95.109.38 B81.169.156.135 B146.0.32.8 B198.204.255.122 B162.220.59.66 B195.154.49.144 B96.31.64.186 169.57.121.204 108.168.159.138 38.95.108.244 157.7.164.19 5.13.214.38 188.126.71.90 200.219.249.89 46.28.53.125 108.168.159.144 209.95.51.184 65.49.14.168 116.193.159.34 103.10.197.130 5.45.255.102 5.63.149.102 188.138.56.112 37.48.116.165 23.235.227.109 162.245.145.229 104.131.147.112 103.10.197.90 103.10.197.154 208.123.223.158 B185.28.191.30 45.114.116.66 37.143.95.218 104.236.195.147 66.102.9.40 64.233.172.194 B1.234.45.50 207.244.79.151 B59.8.174.50 23.101.61.176 192.95.47.194 54.191.171.19 173.245.65.3 37.27.44.202 104.156.233.66 5.39.126.59 207.244.79.141 193.109.196.47 107.170.186.79 B52.68.132.0 188.226.155.106 195.58.245.142 173.247.227.146 208.123.223.147 104.232.37.35 49.213.21.108 46.167.121.31 217.78.6.229 104.209.188.207 37.143.89.206 46.165.234.137 148.251.232.140 216.158.192.226 104.131.66.8 176.9.2.173 193.164.133.40 61.19.228.78 4.26.209.54 198.7.59.110 46.165.210.87 123.202.90.219 94.76.233.203 100.43.90.8 54.210.237.68 54.175.89.172 46.23.66.109 37.130.224.22 159.253.128.168 8.28.16.254 46.23.66.107 69.160.43.237 54.176.137.163 176.9.2.173 159.253.128.166 37.99.89.224 209.85.238.18 46.236.26.103 106.187.49.88 162.213.197.190 5.13.239.179 50.117.34.138 66.249.73.242 66.249.73.138 209.85.238.9 54.209.60.63 66.249.73.130 209.85.238.127 78.106.208.116 46.118.100.186 54.219.106.162 206.190.138.20 66.249.84.103 37.27.62.221 128.75.125.34 168.235.194.180 100.43.81.134 128.199.81.128 179.43.147.83 64.233.173.57 65.49.68.194 207.244.79.152 217.118.23.115 208.123.223.152 5.45.192.81 37.229.123.234 128.199.106.5 208.123.223.215 109.86.244.239 208.123.223.52 5.166.194.82 208.123.223.231 176.15.106.169 188.166.109.30 208.123.223.169 5.248.35.11 94.153.44.107 208.123.223.36 69.80.103.148 95.211.226.38 104.196.9.35 106.186.118.77 209.95.51.183 109.86.47.88 208.123.223.127 52.23.156.32 188.138.147.22 188.163.99.194 178.162.208.141 208.123.223.94 104.197.56.196 207.244.76.210 176.194.119.107 178.162.217.146 168.235.198.84 162.245.144.253 5.45.255.69 208.123.223.91 54.173.202.107 8.37.224.103 208.123.223.148 148.251.83.41 207.244.77.1 208.123.223.251 207.244.96.236 93.80.158.30 208.123.223.199 208.123.223.101 5.63.149.98 104.131.209.90 66.85.139.246 178.162.197.211 173.245.65.198 I will update this list weekly at this topic: https://bitcointalk.org/index.php?topic=1200700.0
|
|
|
|
ofirbeigel
|
|
October 25, 2015, 01:09:06 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
|
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
FaucetWorld
|
|
October 25, 2015, 01:23:53 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update.
|
|
|
|
rkandrades
Sr. Member
Offline
Activity: 392
Merit: 251
Bitcoin Faucet & Blog
|
|
October 25, 2015, 02:14:08 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update. Exactly. All in this topic will help you so much. But it isn't enough. We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too. Do you now how to do simple changes in a PHP code?
|
|
|
|
ofirbeigel
|
|
October 25, 2015, 02:16:18 PM |
|
Hi, just found this awesome thread.
So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?
Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot. New features are now tested and soon will be published update. Exactly. All in this topic will help you so much. But it isn't enough. We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too. Do you now how to do simple changes in a PHP code? Yes I do and I already implemented what's in here. Hope this helps.
|
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
ofirbeigel
|
|
October 26, 2015, 07:54:41 AM |
|
I can't seem to find the FunCaptcha security options you talk about in the OP. I just get a very basic webpage where I can retrieve my keys.
|
99Bitcoins - We translate Bitcoin into plain English. Bitrated user: ofir.
|
|
|
Gifted
|
|
October 26, 2015, 07:15:54 PM |
|
Alright, so my faucet www.bit-essence.com was getting raped by bots. Here are two pictures, one showing how bad it was, the other showing how much better I made it. Before I go and take credit for this, I got some information from MASETRBIT in this thread: https://bitcointalk.org/index.php?topic=1210279.0BeforeAfterAs you can see, from the time the payouts were made, I have made a huge dent in bots accessing my faucet. Here's how: FirstIn the root directory of your server, there should be a file called .htaccess, HERE'S WHAT MINE LOOK LIKE Copy and paste it to yours. This will block all the TOR relays/exit nodes from accessing your website. TOR is good to block because it's one of the main things people use to bypass your time limit. Just google "bypass faucet time limit" you will see that it's one of the ways people bypass your time limit. To get an updated list of tor exit nodes visit https://www.dan.me.uk/torlist/Here's a website to paste the IP's, it will generate the proper code for you. http://www.htaccesstools.com/block-ips/SecondIn your faucet template, ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php, place this code, above <!DOCTYPE html> <?php if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1)) die("It would apprear you're using a proxy, so please, go fuck yourself!");
function checkProxy($ip){ $contactEmail="EMAIL"; $timeout=3; $banOnProability=0.99; $ch = curl_init(); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_TIMEOUT, $timeout); curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip"); $response=curl_exec($ch); curl_close($ch); if ($response > $banOnProability) { return true; } else { if ($response < 0 || strcmp($response, "") == 0 ) { //The server returned an error, you might want to do something //like write to a log file or email yourself //This could be true due to an invalid input or you've exceeded //the number of allowed queries. Figure out why this is happening //because you aren't protected by the system anymore //Leaving this section blank is dangerous because you assume //that you're still protected, which is incorrect //and you might think GetIPIntel isn't accurate anymore //which is also incorrect. //failure to implement error handling is bad for the both of us } return false; } } $ip=$_SERVER['REMOTE_ADDR']; if (checkProxy($ip)) { echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />"; } ?>
Here's a website to check if your faucet is still vulnerable. http://boomproxy.com/SecondOn funcaptcha's website edit you captcha, on the "security" tab select "always enhanced". Click save, then wait 5-10 minutes. Your captcha will now be alot harder for bots to bypass. I hope this helps other faucet owners, as it's terrible how bots think they can steal our valuable satoshis :3 You try and be nice, by giving people free bitcoins and they feel the need to exploit it. just so you know this site says im on a proxy and im not . So this is deferring real people too .
|
|
|
|
thefaucetrunner
Sr. Member
Offline
Activity: 714
Merit: 250
Defend Bitcoin and its PoW: bitcoincleanup.com
|
|
October 27, 2015, 04:55:22 AM |
|
GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.
Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.
For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.
Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.
|
|
|
|
|