〖ⓉⓊⓉⓄⓇⒾⒶⓁ〗 Stop Bots + Proxies From Using Your Faucet

[FaucetRank.com]

I'm having problem after putting above code in my htaccess file

[FaucetWorld]

They're TOR ips and in my new .htaccess I've blocked Russia and China from accessing my faucet. It appears to have stopped them.

Blocking Russia, China or other country will not help you! Only blocking proxies can help with this fight!

Thank you guys for great job!

[mari88]

i have added your code to my template and nothing happens i can visit faucet with boomproxy.com
and i have added your .htaccess to my root



kind regrads

[FaucetRank.com]

i have added your code to my template and nothing happens i can visit faucet with boomproxy.com
and i have added your .htaccess to my root



kind regrads

Probably you did something wrong

[altcoinhosting]

Nice function...

For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution.

Thanks for contributing to the community  

EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this

[mari88]

i have added your code to my template and nothing happens i can visit faucet with boomproxy.com
and i have added your .htaccess to my root



kind regrads

Probably you did something wrong

whooooow what a helping user you spamer
i know that something is wrong
hat these spamers ...... i have fixxed the problem with CTRL+F5
Script now working thanks.


kind regrads

[rkandrades]

Guys... I just developed a very effective proxy server barrier!

My solution has 4 layers of protection.

1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist.
2nd layer: TOR users protection. Almost 100% effective.
3rd layer: Popular and Known Proxy Servers blocked.
4th layer: Unknown proxies blocked by intelligent algorithms.

It works for any site running PHP.

If you are interested in a deal, send me a PM. You can test the service first.

[AlexAce420]

Morning everyone, I have just updated my original post and I am having great luck in the fight against bots!

Nice function...

For the sake of completeness, it would be nice if you would also filter out tor exit nodes... I saw a post yesterday with a guy having problems with a bot over tor, and a fucntion like yours (but with tor filtering) would have been his sollution.

Thanks for contributing to the community  

EDIT: for the sake of honesty, i haven't tested out your script, so i'm not sure if it doesn't already do this

Check out step one on my original post, it explains how to block tor exit nodes.

Guys... I just developed a very effective proxy server barrier!

My solution has 4 layers of protection.

1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist.
2nd layer: TOR users protection. Almost 100% effective.
3rd layer: Popular and Known Proxy Servers blocked.
4th layer: Unknown proxies blocked by intelligent algorithms.

It works for any site running PHP.


I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page).

If you are interested in a deal, send me a PM.

https://www.vpnbook.com/webproxy

http://bitcoin-catcher.com/faucet

Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave.

[rkandrades]

Morning everyone, I have just updated my original post and I am having great luck in the fight against bots!

Guys... I just developed a very effective proxy server barrier!

My solution has 4 layers of protection.

1st layer: Custom IPs blacklist and cache. Supported by the layers above and customizable if your personal IPs blacklist.
2nd layer: TOR users protection. Almost 100% effective.
3rd layer: Popular and Known Proxy Servers blocked.
4th layer: Unknown proxies blocked by intelligent algorithms.

It works for any site running PHP.


I challenge you to try some proxies on my site: http://bitcoin-catcher.com/faucet (only works on the faucet page).

If you are interested in a deal, send me a PM.

https://www.vpnbook.com/webproxy

http://bitcoin-catcher.com/faucet

Yours isn't flawless, quit trying to "make a deal"/advertise your faucet on my thread. My thread is intended for free public knowledge, so please leave.

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalk.org/index.php?topic=1200700.0

[AlexAce420]

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalk.org/index.php?topic=1200700.0

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

[rkandrades]

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalk.org/index.php?topic=1200700.0

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

[rkandrades]

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalk.org/index.php?topic=1200700.0

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

Ah... One more thing.

My barrier is producing good stats and logs.

In some days I will share the most identified proxies IP list with everyone for free.

Give me two or three days.

[rkandrades]

No problem, friend. I just edited my post and removed the link.

Anyways, I'm just trying to trade knowledge.

Do not forget that I am helping faucet owners about security questions for free about weeks in this forum...

>>> https://bitcointalk.org/index.php?topic=1200700.0

I totally didn't realize that was you! I'm sorry if I sounded rude, I just think that this knowledge should be freely available to the public. If I buy it from you, can I post it on this thread?

No problem.

Just one observation, that proxy tou tested on my site failed. My barrier is redirecting it to an other site.

About the deal, I'm trying to do trades because I spent a lot of efforts and hours without sleep to create this barrier.

Of course if you buy this knowledge you could share it.

I would not do this because this way we are revealing our defenses to tje scammers too. They will break the barrier easily.

Then I decided that I won't share this for free. To protect my work and make its effective for a long time.

Ah... One more thing.

My barrier is producing good stats and logs.

In some days I will share the most identified proxies IP list with everyone for free.

Give me two or three days.

Guys... These are the proxy servers and scam IPs that my barrier blocked yesterday. Use for your safe and for free.

Code:

162.254.149.195
85.25.201.120
149.210.131.21
159.253.128.175
95.141.187.216
5.13.207.5
52.5.121.103
179.107.42.151
199.115.117.194
216.218.131.173
65.49.14.148
81.95.123.216
199.115.117.242
173.245.65.202
37.27.61.32
162.213.40.198
107.170.17.131
162.243.158.7
95.141.20.199
45.55.49.75
162.243.127.7
122.155.34.42
199.115.117.243
159.253.128.172
46.34.213.220
159.253.128.169
46.23.66.106
188.138.8.70
66.171.228.75
188.166.121.88
188.226.170.140
145.249.150.87
178.255.153.247
207.244.86.211
108.168.239.92
5.14.141.64
103.10.199.38
66.171.228.247
49.213.18.108
104.236.70.228
217.118.23.97
108.168.159.147
50.116.9.34
45.114.116.209
198.7.58.81
46.101.35.224
119.247.191.114
194.169.217.14
46.4.79.135
93.184.65.176
128.199.53.63
144.76.44.114
146.185.28.178
51.39.128.155
190.248.68.138
173.245.65.88
54.176.17.88
31.47.127.155
38.95.109.38
B81.169.156.135
B146.0.32.8
B198.204.255.122
B162.220.59.66
B195.154.49.144
B96.31.64.186
169.57.121.204
108.168.159.138
38.95.108.244
157.7.164.19
5.13.214.38
188.126.71.90
200.219.249.89
46.28.53.125
108.168.159.144
209.95.51.184
65.49.14.168
116.193.159.34
103.10.197.130
5.45.255.102
5.63.149.102
188.138.56.112
37.48.116.165
23.235.227.109
162.245.145.229
104.131.147.112
103.10.197.90
103.10.197.154
208.123.223.158
B185.28.191.30
45.114.116.66
37.143.95.218
104.236.195.147
66.102.9.40
64.233.172.194
B1.234.45.50
207.244.79.151
B59.8.174.50
23.101.61.176
192.95.47.194
54.191.171.19
173.245.65.3
37.27.44.202
104.156.233.66
5.39.126.59
207.244.79.141
193.109.196.47
107.170.186.79
B52.68.132.0
188.226.155.106
195.58.245.142
173.247.227.146
208.123.223.147
104.232.37.35
49.213.21.108
46.167.121.31
217.78.6.229
104.209.188.207
37.143.89.206
46.165.234.137
148.251.232.140
216.158.192.226
104.131.66.8
176.9.2.173
193.164.133.40
61.19.228.78
4.26.209.54
198.7.59.110
46.165.210.87
123.202.90.219
94.76.233.203
100.43.90.8
54.210.237.68
54.175.89.172
46.23.66.109
37.130.224.22
159.253.128.168
8.28.16.254
46.23.66.107
69.160.43.237
54.176.137.163
176.9.2.173
159.253.128.166
37.99.89.224
209.85.238.18
46.236.26.103
106.187.49.88
162.213.197.190
5.13.239.179
50.117.34.138
66.249.73.242
66.249.73.138
209.85.238.9
54.209.60.63
66.249.73.130
209.85.238.127
78.106.208.116
46.118.100.186
54.219.106.162
206.190.138.20
66.249.84.103
37.27.62.221
128.75.125.34
168.235.194.180
100.43.81.134
128.199.81.128
179.43.147.83
64.233.173.57
65.49.68.194
207.244.79.152
217.118.23.115
208.123.223.152
5.45.192.81
37.229.123.234
128.199.106.5
208.123.223.215
109.86.244.239
208.123.223.52
5.166.194.82
208.123.223.231
176.15.106.169
188.166.109.30
208.123.223.169
5.248.35.11
94.153.44.107
208.123.223.36
69.80.103.148
95.211.226.38
104.196.9.35
106.186.118.77
209.95.51.183
109.86.47.88
208.123.223.127
52.23.156.32
188.138.147.22
188.163.99.194
178.162.208.141
208.123.223.94
104.197.56.196
207.244.76.210
176.194.119.107
178.162.217.146
168.235.198.84
162.245.144.253
5.45.255.69
208.123.223.91
54.173.202.107
8.37.224.103
208.123.223.148
148.251.83.41
207.244.77.1
208.123.223.251
207.244.96.236
93.80.158.30
208.123.223.199
208.123.223.101
5.63.149.98
104.131.209.90
66.85.139.246
178.162.197.211
173.245.65.198

I will update this list weekly at this topic: https://bitcointalk.org/index.php?topic=1200700.0

[ofirbeigel]

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

[FaucetWorld]

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

[rkandrades]

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

Exactly.

All in this topic will help you so much. But it isn't enough.

We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too.

Do you now how to do simple changes in a PHP code?

[ofirbeigel]

Hi, just found this awesome thread.

So just to make things clear (since I'm not very technical) - is the information on the OP good enough or do I need to add any of the other scripts you've put in here?

Probably this what you see in this thread is not enough to protect your faucet good enough, but for sure will help a lot.

New features are now tested and soon will be published update.

Exactly.

All in this topic will help you so much. But it isn't enough.

We are posting new techniques and security solutions here everyday. Stay visiting this topic to learn more and develop your own solutions too.

Do you now how to do simple changes in a PHP code?

Yes I do and I already implemented what's in here. Hope this helps.

[ofirbeigel]

I can't seem to find the FunCaptcha security options you talk about in the OP. I just get a very basic webpage where I can retrieve my keys.

[Gifted]

Alright, so my faucet www.bit-essence.com was getting raped by bots. Here are two pictures, one showing how bad it was, the other showing how much better I made it.

Before I go and take credit for this, I got some information from MASETRBIT in this thread:https://bitcointalk.org/index.php?topic=1210279.0

Before


After


As you can see, from the time the payouts were made, I have made a huge dent in bots accessing my faucet. Here's how:

First

In the root directory of your server, there should be a file called .htaccess, HERE'S WHAT MINE LOOK LIKE Copy and paste it to yours.

This will block all the TOR relays/exit nodes from accessing your website. TOR is good to block because it's one of the main things people use to bypass your time limit. Just google "bypass faucet time limit" you will see that it's one of the ways people bypass your time limit.

To get an updated list of tor exit nodes visit https://www.dan.me.uk/torlist/

Here's a website to paste the IP's, it will generate the proper code for you. http://www.htaccesstools.com/block-ips/

Second

In your faucet template, ROOTDIRECTORY/faucet/templates/YOURTEMPLATE/index.php, place this code, above <!DOCTYPE html>

Code:

<?php
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");

function checkProxy($ip){
		$contactEmail="EMAIL";
		$timeout=3; 
		$banOnProability=0.99;
		
		$ch = curl_init();
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
		curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
		$response=curl_exec($ch);
		
		curl_close($ch);
		
		
		if ($response > $banOnProability) {
				return true;
		} else {
			if ($response < 0 || strcmp($response, "") == 0 ) {
				//The server returned an error, you might want to do something
				//like write to a log file or email yourself
				//This could be true due to an invalid input or you've exceeded
				//the number of allowed queries. Figure out why this is happening
				//because you aren't protected by the system anymore
				//Leaving this section blank is dangerous because you assume
				//that you're still protected, which is incorrect
				//and you might think GetIPIntel isn't accurate anymore
				//which is also incorrect.
				//failure to implement error handling is bad for the both of us
			}
				return false;
		}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
	echo "It would apprear you're using a proxy, so please, go fuck yourself! <br />";
}
?>

Here's a website to check if your faucet is still vulnerable. http://boomproxy.com/

Second

On funcaptcha's website edit you captcha, on the "security" tab select "always enhanced". Click save, then wait 5-10 minutes. Your captcha will now be alot harder for bots to bypass.



I hope this helps other faucet owners, as it's terrible how bots think they can steal our valuable satoshis :3 You try and be nice, by giving people free bitcoins and they feel the need to exploit it.

just so you know this site says im on a proxy and im not . So this is deferring real people too .

[thefaucetrunner]

GetIPIntel won't work for high traffic faucets, too many requests will spit our 404/403 errors. I spoke with the admin recently and tested it.

Not sure about the rest. Proxies are an issue but adding features to limit claims from more than X amount of IP addresses is a step in the right direction.

For MiniFaucet based faucets, it helps to have a limit on large cashouts. Botters are keeping up with things, that's for sure. I don't quite understand how.

Some of the best devs out there haven't been able to do much. Catching repeat offenders and blacklisting IPs helps, but you'll have to pay a few bots before you get that knowledge.