FAUCET BOTS

[George.FAUTSY]

Hey guys, it seems all those methods posted over here on bicointalk forum about stoping bots are not really working.

our faucet is literally Bombed for the last 2 days with bots after Faucetbox servers problems.

our faucet traffic almost tripled after their server crush, advertisement earnings dropped dramatically, bots are draining our faucet like crazy. wtf is happening. very weird

antibot links script is useless, captchas doesn't stop bots.

who else are experiencing such issues and what methods are you applying to fight against bots, tor's, vpn, vps etc..?

[sabotag3x]

yeap, antibot and captcha are useless.. just check sql database and ban all range of bot vpn ip's or vpn company names

[catcatcatcaty]

yeap, antibot and captcha are useless.. just check sql database and ban all range of bot vpn ip's or vpn company names

Antibot is not useless, it only works if you make your own word lists, even then it will be a matter of time before the bots get through

And,

RECAPTCHA IS 100% USELESS - use solvemedia instead.

[amacar2]

I think also funcaptcha can provide better solution than recaptcha, recaptcha are just useless. And also don't forget to have antibot links.

[alfaboy23]

yeap, antibot and captcha are useless.. just check sql database and ban all range of bot vpn ip's or vpn company names

Antibot is not useless, it only works if you make your own word lists, even then it will be a matter of time before the bots get through

And,

RECAPTCHA IS 100% USELESS - use solvemedia instead.

Solvemedia is useless too, there are also bots that can solve solvemedia's captcha.

I think also funcaptcha can provide better solution than recaptcha, recaptcha are just useless. And also don't forget to have antibot links.

This is a one good security solution, but funcaptcha is not free as far as I know now.

[cryptobeat]

I can confirm that the bots are becoming better every day. The only thing I've found to stop them is to control payments manually.

I have the weekly payout system. It gets rid of bots because they don't get the payment and go away. It's not perfect though, because I think a lot of users who don't read the faucet rules get the impression the faucet is not paying at all, so my user count is low...
But maybe if you'd employ a daily payout it would be enough.

What helps too is to use custom built scripts (no one would make a bot specific to your faucet).

I'm developing a new custom CLAIM script that I think will filter out bots. I'll post here when it's done and send it via pm to anyone who will be interested in testing it.

[LTU_btc]

I think also funcaptcha can provide better solution than recaptcha, recaptcha are just useless. And also don't forget to have antibot links.

Funcaptcha was good solution to stop bots, but now it costs $35. It's too expensive for faucet owners, and no one can afford to use it in faucet.

[felicita]

iam figthing untill my faucets starts against bots and vpn users
my faucet is now free from VPn and Proxys i banned them all per isp!

here are my banned isp array(all VPN ips):

Code:

$bad_isp = array("root","anchorfree","Backbone","Choopa","Ikoula","Incero","QuadraNet","Fasthosts","Hosting","Host Europe","Netrouting","M247",
	"Redstation Limited","depo40.ru","Dedibox","DataClub","Dedicated","dedicated","DigitalOcean","Digital Ocean","Private Layer","Pacswitch","OVH",
	"Linode","LeaseWeb","Leaseweb","UK2.NET","server","ServerStack","Softronics","ServiHosting","Server-plus","Secured Servers","Virtono");

kind regards

[rkandrades]

Guys, I had studied how to stop faucet bots.

So, I developed a technique which blocked at least 80% of bots and scammers users (VPNs, Proxies, etc) in ny faucet.

It consists in two techniques combinated: Checking Malicious IPs and using Honeypots.

So, I created a database with more than 40k bad IPs related to bitcoin attacks. I started to collect malicious bitcoin address recently and I got/blocked more than 1000 addresses in a week with my technique.

Soon, I want to launch a cheap service where faucets can use my security system to check and block payments to scammers and bots. It must be ready in less than one month.

For this, I am looking for a faucet owner to help me testing the service for free. I just need someone with basic knowledge in PHP.

Send me a PM if you are interested.

[chixka000]

developers of that bots was damn to good i guess. Captcha system is starting to get pointless because of this bots i have experienced also this kind of problem when i started my first faucet and went dry within a  week so i decided to just stop working on it and wait..

[FaucetRank.com]

yeap, antibot and captcha are useless.. just check sql database and ban all range of bot vpn ip's or vpn company names

antibot links are very useful but this antbot script works properly only when you use different puzzle for example special character in puzzles for each question.
if you use default antibot script for faucet than sorry t's very easy for faucets and no body can help you in that situation.

[catcatcatcaty]

yeap, antibot and captcha are useless.. just check sql database and ban all range of bot vpn ip's or vpn company names

antibot links are very useful but this antbot script works properly only when you use different puzzle for example special character in puzzles for each question.
if you use default antibot script for faucet than sorry t's very easy for faucets and no body can help you in that situation.

Exactly. What is to stop bot developers downloading the deafult antibot script, seeing the answers and adding them to their bots.

[5ub_zer0]

iam figthing untill my faucets starts against bots and vpn users
my faucet is now free from VPn and Proxys i banned them all per isp!

here are my banned isp array(all VPN ips):

Code:

$bad_isp = array("root","anchorfree","Backbone","Choopa","Ikoula","Incero","QuadraNet","Fasthosts","Hosting","Host Europe","Netrouting","M247",
	"Redstation Limited","depo40.ru","Dedibox","DataClub","Dedicated","dedicated","DigitalOcean","Digital Ocean","Private Layer","Pacswitch","OVH",
	"Linode","LeaseWeb","Leaseweb","UK2.NET","server","ServerStack","Softronics","ServiHosting","Server-plus","Secured Servers","Virtono");

kind regards

nice list .. but what is with

example:
Name:    ec2-52-17-6-136.eu-west-1.compute.amazonaws.com
Address:  52.17.6.136
Type: Elite-Proxy
 
what i whould like to say .. you ban the almost biggest Server Provider like HostEurope ..but not amazonaws ? .. also a lot of vps/tor exit nodes are hostet at Hetzner

[felicita]

 
what i whould like to say .. you ban the almost biggest Server Provider like HostEurope ..but not amazonaws ? .. also a lot of vps/tor exit nodes are hostet at Hetzner

Thanks iam allways happy to add some isps to my badlist
iam from germany so its bad that i forgot hetzner its a germany company XD

for tor exit notes its easy to check !!!
https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$server_adress&port=$port



thanks and kind regards

[5ub_zer0]

iam from germany so its bad that i forgot hetzner its a germany company XD

for tor exit notes its easy to check !!!
https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$server_adress&port=$port



thanks and kind regards

me too ..

yeah i know how to check tor exit nodes

[George.FAUTSY]

ok guys thank to everyone who replied.

does anyone tried php captcha? I see nowdays many faucet owners are using it. It can be implemented as the second captcha instead of anti-bot links. what do you think?

[FaucetRank.com]

ok guys thank to everyone who replied.

does anyone tried php captcha? I see nowdays many faucet owners are using it. It can be implemented as the second captcha instead of anti-bot links. what do you think?

Antibot links are much better than php CAPTCHA because users only need to click with mouse on links but in php CAPTCHA user has to solve mathematical puzzle.
if you use Antibot links in proper way you can keep bots away from your faucet.

[Lexiatel]

I can confirm that the bots are becoming better every day. The only thing I've found to stop them is to control payments manually.

I have the weekly payout system. It gets rid of bots because they don't get the payment and go away. It's not perfect though, because I think a lot of users who don't read the faucet rules get the impression the faucet is not paying at all, so my user count is low...
But maybe if you'd employ a daily payout it would be enough.

What helps too is to use custom built scripts (no one would make a bot specific to your faucet).

I'm developing a new custom CLAIM script that I think will filter out bots. I'll post here when it's done and send it via pm to anyone who will be interested in testing it.

What's your faucet's site? I would play it if my IP's not blocked. I don't mind signing up for weekly withdraws, if the faucet was trusted (like moonbitco.in)

As for the captchas, I don't know if it works against bots, but there's this one faucet (I wish i could remember it), but it's one that's a daily claim, and before you can even access the main page of its site, there's a quiz, and it has a random sentence and/or structure of words that could or could not make sense. Something like: "I ate two pieces of toast. I played with one ball, and whistled 4 times" and the question will be something like "Which one is the food?" That's not exactly how it goes, but it's something like that; unique, and hard for bots, imo, to break through. Sometimes you have to answer quizzes two times. I really like this type of antibot.

[darklus123]

iam figthing untill my faucets starts against bots and vpn users
my faucet is now free from VPn and Proxys i banned them all per isp!

here are my banned isp array(all VPN ips):

Code:

$bad_isp = array("root","anchorfree","Backbone","Choopa","Ikoula","Incero","QuadraNet","Fasthosts","Hosting","Host Europe","Netrouting","M247",
	"Redstation Limited","depo40.ru","Dedibox","DataClub","Dedicated","dedicated","DigitalOcean","Digital Ocean","Private Layer","Pacswitch","OVH",
	"Linode","LeaseWeb","Leaseweb","UK2.NET","server","ServerStack","Softronics","ServiHosting","Server-plus","Secured Servers","Virtono");

kind regards

nice list .. but what is with

example:
Name:    ec2-52-17-6-136.eu-west-1.compute.amazonaws.com
Address:  52.17.6.136
Type: Elite-Proxy
 
what i whould like to say .. you ban the almost biggest Server Provider like HostEurope ..but not amazonaws ? .. also a lot of vps/tor exit nodes are hostet at Hetzner

Not all i guess but this list is good , i know he can still improve it and kill also those biggest server you are saying. I am also an advocate of stopping and killing those bots because it is so annoying and painful in our faucets

[Crystal11]

99% of the faucet admin don't realise some things which may look like a bot invasion over the faucets but in fact it's not really :

1. With all the PTCs scams more people are moving to faucets (to the serious and paying ones with decent claims) in fact even me i prefer to advertise  faucet ref link instead of a PTC ref link.
2. The global poverty and job missing opportunities,are increasing, more and more people are coming and trying to earn some money from internet (specially from poor countries).
3. The are unemployed people, like me, who has lots of free time to keep visiting and claiming on faucets all day long (a paranoid faucet admin might confuse me/us with a bot because i have time to claim all day long). Also there could be people on a wheel chair or with an incurable disease.
4. If the faucet claims are fast i mean not to many captchas to solve for few satoshi then of course i will stay and claim otherwise i will leave the faucet because its NOT WORTH THE TIME (and electricity used by computer) to solve half a day captchas for few hundreds satoshis. Real humans can leave also if there are to many captchas but faucet admins will beleive that he get rid of bots with to much captchas but in fact admins are losing also real people.
5. If a faucet admin gets paranoid about bots then he should shut down the faucet and try to earn money from something else (such as affiliation) with his domain .
6. I dont say that bots doesnt exist , i do not know , i'm not expert in computers , bots, hackers, dos attacks are a real risk on internet and once you open a website you need to be aware of them as admin but dont get paranoid on real people, the more layers on captchas added the better the chance to lose real people and of course traffic decreases. Use a clever captcha such as 3d captcha or the rotating images.
7. There are faucets with 4 levels of captchas ...do you think i'm gonna join and claim there ? NEVER because i don't wanna lose all my day just for solving captchas. That means i'm a bot if i don't join there ? If yes then you are getting paranoid and you need to shut down your faucet  
8. I do support serious and decent paying faucets by clicking once a day on an adsense spot (not more than once or twice so they don't get banned by google).
Getyourbitco.in/ has changed captchas and introduced 1 more level , that's fine because has decent claims but 1 more captcha if they'll add i'll leave their faucet for good. Already time to solve their captchas has increased.