elreyanovip.com << Need to Block those Fuckers with .HTACCESS .. HLP!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • qxm
    Confirmed User
    • Jul 2006
    • 5970

    #1

    elreyanovip.com << Need to Block those Fuckers with .HTACCESS .. HLP!

    Hi Guys!,

    I have this one site popping all over my bandwidth stats and it seems they are using 20-30Gb of traffic a day ... so they are hotlinking the shit out of my stuff ... I have them on my htaccess file but that doesn't seem to keep them from hotlinking... any ideas about blocking these fuckers?

    Here is my .HTACCESS file

    php_flag safe_mode off
    php_flag log_errors on
    php_flag register_globals on

    RewriteEngine on
    Options +FollowSymlinks
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?redlips\.ru/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?spermik\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ananasik\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?arbuzik\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?buterbrod\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?kokosik\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?eroman\.ru/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?sexpix\.ru/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?morkovka\.net/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?smoder\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruclub\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?sex4free\.co.il/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?almazik\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?elreyanovip\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?yabun\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?lunka\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?kabachok\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?directoriowarez\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?pregame\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruporno\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?pizdulek\.net/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?uol\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?terra\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?chatropolis\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?el-ladies\.ru/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruscams\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?superporka\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?uberpron\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?eroclip\.ru/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?travian\.cz/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?mymonk\.net/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?semonk\.com/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ix\.nu/ [NC,OR]
    RewriteCond %{HTTP_REFERER} ^http://(.+\.)?fusker\.lv/ [NC]
    RewriteRule .*\.(jpe?g|gif|bmp|png)$ - [F]

    ICQ: 266990876
  • directfiesta
    Too lazy to set a custom title
    • Oct 2002
    • 30257

    #2
    Their Ip is : 72.232.73.2

    If dedicated, block them at the firewall level.

    If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.
    I know that Asspimple is stoopid ... As he says, it is a FACT !

    But I can't figure out how he can breathe or type , at the same time ....

    Comment

    • AlCapone
      Confirmed User
      • Sep 2003
      • 708

      #3
      Why blockin'?
      "You can get more with a kind word and a gun than you can with a kind word alone.”

      Comment

      • qxm
        Confirmed User
        • Jul 2006
        • 5970

        #4
        ahhh there we go.... it was easy to block them at the firewall level with FreeBSD ... thanks for the hint m8

        I was going nuts with the freaking .htaccess ....

        ICQ: 266990876

        Comment

        • qxm
          Confirmed User
          • Jul 2006
          • 5970

          #5
          Originally posted by AlCapone
          Why blockin'?
          well if someone is hotlinking your shit (content only...) and constantly using 10-30 GB of your bandwidth what would you do? Would u send them a greeting card ??? Thank u note?

          If you visit their home page >> elreyanovip.com it redirects u to google... so they are using this site as a proxy to get to my content....

          ICQ: 266990876

          Comment

          • rowan
            Too lazy to set a custom title
            • Mar 2002
            • 17393

            #6
            Originally posted by directfiesta
            Their Ip is : 72.232.73.2

            If dedicated, block them at the firewall level.

            If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.
            If I understand the OP correctly the hotlink hits would be coming from surfers of the offending site, not from the site's server... if that's the case then you have to block at a higher level, based on the referer.

            Comment

            • rowan
              Too lazy to set a custom title
              • Mar 2002
              • 17393

              #7
              BTW gxm... you say your htaccess doesn't "stop" them... are you sure you're not just seeing the log entries for 403/forbidden? The attempt to fetch will still happen, but Apache will block them at that point so all they get back is a 403 error.

              Comment

              • qxm
                Confirmed User
                • Jul 2006
                • 5970

                #8
                Originally posted by rowan
                BTW gxm... you say your htaccess doesn't "stop" them... are you sure you're not just seeing the log entries for 403/forbidden? The attempt to fetch will still happen, but Apache will block them at that point so all they get back is a 403 error.
                well... if they were attempting to grab the content and only getting 404s I am pretty sure my stats wouldn't show 10-30GB of daily usage.....right?

                I am checking the referring URLs by document and they all go to .jpg, wmv, mpg
                Last edited by qxm; 08-07-2008, 06:34 PM.

                ICQ: 266990876

                Comment

                • rowan
                  Too lazy to set a custom title
                  • Mar 2002
                  • 17393

                  #9
                  Check your raw apache logs and see what the return status is. 200=content delivered, 403=forbidden

                  Comment

                  • qxm
                    Confirmed User
                    • Jul 2006
                    • 5970

                    #10
                    I see lots of 200 and 206s.......hopefully blocking them by IP will do the trick.....

                    ICQ: 266990876

                    Comment

                    • Warlock77
                      Confirmed User
                      • Apr 2004
                      • 246

                      #11
                      The main site is: elreyano.com (now redirecting to puteros.com) maybe you want to block these domains

                      Comment

                      • Tat2Jr
                        Confirmed User
                        • Feb 2001
                        • 4882

                        #12
                        Originally posted by Warlock77
                        The main site is: elreyano.com (now redirecting to puteros.com) maybe you want to block these domains

                        WARNING!
                        puteros.com popped up a virus alert from Avira anti-virus. Even while using Firefox with the "no script" extention installed. Don't visit elreyano.com!
                        NICHE MONEY >> Ass Worship • Panties • Solo Teen • Pantyhose
                        Serving up exclusive fetish sites since 1997!

                        Comment

                        • SpicyM
                          Confirmed User
                          • Aug 2006
                          • 4580

                          #13
                          if you block them via htaccess and redirect to lets say 404 they might still appear in your stats.. So they are maybe blocked already but you still think they suck your BW. I believe htaccess is more than good for this, I know that site too, they are like the hun just 3x bigger and 10x shittier lol
                          no sig, sorry

                          Comment

                          • GrouchyAdmin
                            Now choke yourself!
                            • Apr 2006
                            • 12085

                            #14
                            The [F] stanza forces a 403, people.

                            Comment

                            • u-Bob
                              there's no $$$ in porn
                              • Jul 2005
                              • 33063

                              #15
                              Originally posted by directfiesta
                              Their Ip is : 72.232.73.2

                              If dedicated, block them at the firewall level.

                              If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.
                              won't do any good if they are "hotlinking"...

                              Comment

                              Working...