Good idea.

We'll disable FaucetBOX.com completely around 18.00 UTC today.

Edit:

To clarify: on 18.00 UTC all functions on FaucetBOX.com website will be disabled. After that we'll perform one last batch of withdrawal transactions.

Edit2:

These are transactions that were made after closing:

https://btc.blockr.io/tx/info/fb2e25a7cf923834bac95928597f63798209c4b4640160e4b057e842b949b4be
http://explorer.litecoin.net/tx/724bb7263e0c23a8c3d9e0c23399a154127ef0fc75d7308ffd8997e4174ec1c9
http://dogechain.info/tx/d6b26c35aa17edcf38e6876455175103f8c9077b79b63a67128a8eb7ecb97c49
https://chainz.cryptoid.info/ppc/tx.dws?8047da854ecec5c10dc19ed694ae7a375c0bef6be208b4037df4d71998551964
https://bchain.info/XPM/tx/a159416254e2fd670f255674dcf6e9018470d0f9426419b232a52d287f456c15
https://chainz.cryptoid.info/dash/tx.dws?3bc7a03c4fa21cd9c23ee8b7cbe1d33a435dac1ce8e411473bf29f83bf377c51

Almost all faucet owners withdrawn their coins. Don't trust values shown on faucet sites. API doesn't work so they're not updated anymore.

However yes, all coins that aren't withdrawn in time will be lost, as we'll destroy all data we have to avoid potential leaks later.

PM a link to a file (pastebin.com will be fine) containing all addresses and signatures for this message:


It should be in an easily parsable format. Preferably JSON, but even something like:


will be enough. Don't forget to send me the exact message you've signed (I don't know your destination address yet).

Your post says that some modifications are needed to Faucet in a BOX to use it with Faucethub, ePay or Faucetsystem. That's not true, they're supported out of the box without any modifications.

Edit $admin_template variable in script/admin_templates.php. Just copy-paste from some other tab and customize it. Then you have to handle fetching data for this in admin.php file.

I can't give anything more specific, as it would depend on what exactly you want to do.

What do you mean by "table"?

It depends on your wallet. I don't know Xapo, so if you're using it you have to contact Xapo support and ask them how to do that (if that's even possible).


Check now, it should be credited to you account. Sorry for delay!

What address did you deposit to?


But why did you use 600+ addresses on faucets instead of just one?
I'll need a proof that you own these addresses, which means that you would have to sign a message with private key of each address. Are you able to do that?

600+ addresses?! How's that possible?

Actually testing if connection is from Tor is trivial, as Tor advertises list of all exit nodes.

Detecting proxies/vpns/tunnels is of course impossible to do 100% accurately, but you can try to build blacklists of known services (and that's what nastyhosts does), greatly reducing problem.

Recent versions of faucetbox script support FaucetHUB.io out of the box. Just switch the service in admin panel.

You can use nastyhosts.com. It's like getipintel but with much higher limits.

Disclaimer: I've worked for company that's running NastyHosts.

CloudFlare doesn't matter for ACL. CloudFlare is used when someone is visiting your faucet, but it's not used when your faucet is making a request to ePay.info.

Nastyhosts have nothing to do with it, there's some reverse proxy between users and Lindernman's faucet.

Lindernman, you've said it's a VPS. How did you set it up? Did you set it up yourself? Does "nginx" or "reverse proxy" tell you anything?

No, it sends coins to faucetbox address, marked as "Withdrawal".


Huh, I forgot about that. But in this question abrr already has an account.

But really. Fees when spending these coins will cost you more then they're worth. It's actually a net-negative for your wallet.

I did pay attention. I answered this question: "i need transfer some satoshi from my own faucet to my faucetbox for reached the payout threshold how i can do that ?".

If you have an address on FaucetBOX.com that's below the threshold and you really, really want to get coins accumulated on it, you have to:

1. create owner account on FaucetBOX.com
2. deposit some coins to owner account (must be more than the minimum deposit limit)
3. withdraw these coins to address that's below the threshold
4. now the address is above threshold and you will receive these coins

However that will likely cost you more than you have accumulated due to network fees. And that's why you can't withdraw coins below the threshold: it costs more than they're worth to transfer them. Not only for us to transfer them to you, but also for you to spend them after that.

Just treat these coins as lost.

Go to the Balance tab in your dashboard and click "Withdraw".

I'm not sure what proof you guys would like to see. There would be no logs or "zombie sessions" (what...?) if it's a simple volumetric attack. And it's hard to estimate attack size without help of ISP. 5TB over 5 hours is about 2Gbps, FaucetBOX.com was hit with DDoSes of 1-10 Gbps, it sounds plausible.

That said I have no idea what "hardware and software firewalls" was ePay.info talking about. Firewalls aren't really helpful with DDoSes. And "Cloudflare can't be enough always, they can get past it, having dedicated firewall is necessary" doesn't make sense either. To get past CloudFlare either the attack must be BIG (and 10 Gbps is pretty average, not BIG). They probably screwed up their domain configuration. For example epay.info domain is protected by CloudFlare, but it's MX domain isn't... If there was a DDoS in the first place of course. But personally I don't see anything that would suggest there wasn't one.

I'm not saying there are any leaks . Just that the way you've wrote it makes it very, very easy to create a leak.


So if you know it's not really useful, why did you add it and advertise it as "Bot shield"?

Btw there's always http://nastyhosts.com/ (disclaimer: I'm still working for a company that runs nastyhosts)