BOTS ON MY FAUCET NEED HELP ASAP

[JerryMotov]

Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

[1714761812]

1714761812

[1714761812]

1714761812

[1714761812]

1714761812

[Racey]

Try this Jerry

Stop Bots + Proxies From Using Your Faucet

https://bitcointalk.org/index.php?topic=1211353.0

[Newcoins2020]

Hi,
I have a bitcoin faucet. My impression was extremely low on all my ad networks.
I think that i found out why.
The traffic is mainly coming from VPS.. (if i am correct)
https://snag.gy/psMTWx.jpg
As you can see the most used network is myloc managed it ag: https://www.myloc.de/
and some other hosts.
How can I avoid them from accessing my site?
Best regards,
Jerry

Hi Jerry,

Install a firewall (I recommend CSF) firewall and start by blocking those ip's then make sure bots are automatically banned if they make too many requests in a certain timeframe

Then install a different kind of captcha.

[wdnj]

You need a custom faucet script to  avoid bots.

[JerryMotov]

Thanks for your answers!
I am defenitly going to use your tips.
I am working on it now
I am currently busy with it. I'll keep you all up-to-date!
My site will be up tomorrow

[Gifted]

i can give you a code to put in  your script
 

Code:

//We do not allow proxy here
 if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{ 
  $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Sorry Proxy not allowed !!</p></div></div>';
    $message                     = "Proxy";
    goto error; 
  }
  $q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
  $q->execute(array($username,$ip));
  $row = $q->fetch();

[misterbit]

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:

order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

[FaucetRank.com]

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

Code:

order allow,deny
#https://ipinfo.io/AS24961
#myloc.de
deny from 5.104.104.0/21
deny from 5.199.128.0/20
deny from 5.199.134.6/32
deny from 31.22.104.0/23
deny from 31.22.106.0/23
deny from 31.184.224.0/24
deny from 37.157.248.0/21
deny from 46.20.32.0/20
deny from 46.228.192.0/20
deny from 46.228.196.196/32
deny from 46.228.196.202/32
deny from 62.141.32.0/20
deny from 77.81.109.0/24
deny from 77.81.110.0/24
deny from 78.31.64.0/21
deny from 78.31.64.0/22
deny from 78.31.68.0/22
deny from 80.82.208.0/20
deny from 80.86.170.0/23
deny from 80.86.186.0/24
deny from 81.30.144.0/20
deny from 81.30.146.0/23
deny from 83.136.80.0/21
deny from 85.14.240.0/20
deny from 85.14.243.0/24
deny from 85.14.246.0/24
deny from 85.14.247.0/24
deny from 85.14.251.0/24
deny from 85.114.128.0/19
deny from 89.163.134.56/32
deny from 89.163.151.0/24
deny from 89.163.208.0/20
deny from 89.163.224.0/19
deny from 89.163.224.0/20
deny from 89.163.228.0/24
deny from 91.194.84.0/23
deny from 91.194.84.0/24
deny from 91.194.85.0/24
deny from 91.212.85.0/24
deny from 91.242.212.0/24
deny from 93.186.192.0/20
deny from 93.186.203.0/24
deny from 141.8.244.0/22
deny from 141.8.248.0/24
deny from 146.0.32.0/20
deny from 146.0.47.0/24
deny from 185.15.244.0/22
deny from 185.15.246.161/32
deny from 185.15.246.162/32
deny from 185.15.246.163/32
deny from 185.15.246.164/32
deny from 185.15.246.165/32
deny from 185.15.246.166/32
deny from 185.15.246.167/32
deny from 185.15.246.168/32
deny from 185.15.246.169/32
deny from 185.15.246.170/32
deny from 185.15.246.171/32
deny from 185.15.246.172/32
deny from 185.15.246.173/32
deny from 185.15.246.174/32
deny from 185.97.5.0/24
deny from 185.114.108.0/24
deny from 185.144.236.0/22
deny from 185.146.60.0/22
deny from 188.214.93.0/24
deny from 191.96.66.0/24
deny from 193.22.251.0/24
deny from 193.41.200.0/24
deny from 193.47.99.0/24
deny from 193.111.136.0/21
deny from 193.111.198.0/23
deny from 199.201.240.0/24
deny from 213.202.208.0/20
deny from 217.79.176.0/20
allow from all

No never IP blocking will never solve bot problems

[minix]

Hi Jerry!

You must try CloudFlare, maybe it doesn't block so many threats but it offers very useful data to compare with your analytics account. This way you can be more secure if there's suspicious traffic on your site and take actions to solve it.

Be a faucet owner it's very demanding especially on security tasks.

I hope you can solve it.

Regards!

[JerryMotov]

Thanks for all the answers!
I added the list to my htaccess @misterbit
And @gifted I currently have a similar script on my site https://bitcointalk.org/index.php?topic=1211353.0
However I can't get the last step to work
I can't find this <form method="POST" class="form-horizontal" role="form"> in my index. (I am using faucetbox btw.)
Do you know what I have to do there @Racey

So my current security only is the htaccess file with the deny from IP deny from IP ect..
and I use reCAPTCHA now.
However I don't think that this is enough (is it?)

and I want to try Cloudflare on my site but I have zero experience with it.
And faucet box says:
Be careful! This is an advanced feature. Don't use it unless you know what you're doing. If you set it wrong or you don't properly configure your proxy AND your server YOU MAY LOSE YOUR COINS!

So I am afraid to lose my bitcoins..

And I am definitley going to take a look at CSF firewall when I have the time.

Are there more things I can do to prefent bots from accessing/using my site?

[Racey]

Will pm you about the form.

[zenitzz]

You need a custom faucet script to  avoid bots.

So if i'm not have costum faucet script can't install anti-bot on my faucets site is there another way to address the bot problem for site owners faucet with less fund?

[mcb1221]

Blacklist all the inorganic ip in your script , this is the best way to cope up. meanwhile you can put custom captcha to avoid bots.
You can also install firewall script and redirection script which will take 5 seconds to load your site , actually there are many options , chose the one which suits you.

[misterbit]

Hi, put this in your .htaccess and will prevent the main IP that attack your website.

No never IP blocking will never solve bot problems

Hello, I answered to the question of the user, greetings.

[Racey]

Now he needs help with this problem

I can't find this <form method="POST" class="form-horizontal" role="form"> in my index

[JerryMotov]

I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry

[dfinc]

I currently use reCAPTCHA and anti-bot links.
I also want to add as much as possible proxies/vpn/vps ip's to my htaccess does anyone know where I can find them?
Best regards,
Jerry

Hey Jerry, you can get a list of VPNs, IPs etc. to ban on your faucet at this topic here: https://bitcointalk.org/index.php?topic=1481327.0.
Hope this helps!

[JerryMotov]

Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!

[mcb1221]

Thank you dfinc!
Added the list to my site!

My site is back up online now:
http://golden-faucet.com
If someone finds any security vulnerabilities please let me know!!!

gOOD IT IS NICE THAT YOU ARE BACK WITH YOUR FAUCET AGAIN , DO REMEMBER TO ADD REDIRECTION LINK AS IT WARDS BOTS AND NASTY PEOPLE AWAY DUE TO SOME 5 SECONDS DELAY.