elreyanovip.com << Need to Block those Fuckers with .HTACCESS .. HLP! - GoFuckYourself.com

qxm · 08-07-2008, 06:00 PM

Hi Guys!,

I have this one site popping all over my bandwidth stats and it seems they are using 20-30Gb of traffic a day ... so they are hotlinking the shit out of my stuff ... I have them on my htaccess file but that doesn't seem to keep them from hotlinking... any ideas about blocking these fuckers?

Here is my .HTACCESS file

Quote:

php_flag safe_mode off
php_flag log_errors on
php_flag register_globals on

RewriteEngine on
Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?redlips\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?spermik\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ananasik\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?arbuzik\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?buterbrod\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?kokosik\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?eroman\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?sexpix\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?morkovka\.net/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?smoder\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruclub\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?sex4free\.co.il/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?almazik\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?elreyanovip\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?yabun\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?lunka\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?kabachok\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?directoriowarez\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?pregame\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruporno\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?pizdulek\.net/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?uol\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?terra\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?chatropolis\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?el-ladies\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ruscams\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?superporka\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?uberpron\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?eroclip\.ru/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?travian\.cz/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?mymonk\.net/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?semonk\.com/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?ix\.nu/ [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?fusker\.lv/ [NC]
RewriteRule .*\.(jpe?g|gif|bmp|png)$ - [F]

directfiesta · 08-07-2008, 06:08 PM

Their Ip is : 72.232.73.2

If dedicated, block them at the firewall level.

If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.

AlCapone · 08-07-2008, 06:33 PM

Why blockin'?

qxm · 08-07-2008, 06:42 PM

ahhh there we go.... it was easy to block them at the firewall level with FreeBSD ... thanks for the hint m8

I was going nuts with the freaking .htaccess ....

qxm · 08-07-2008, 06:44 PM

Quote:

Originally Posted by AlCapone

Why blockin'?

well if someone is hotlinking your shit (content only...) and constantly using 10-30 GB of your bandwidth what would you do? Would u send them a greeting card ??? Thank u note?

If you visit their home page >> elreyanovip.com it redirects u to google... so they are using this site as a proxy to get to my content....

rowan · 08-07-2008, 07:17 PM

Quote:

Originally Posted by directfiesta

Their Ip is : 72.232.73.2

If dedicated, block them at the firewall level.

If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.

If I understand the OP correctly the hotlink hits would be coming from surfers of the offending site, not from the site's server... if that's the case then you have to block at a higher level, based on the referer.

rowan · 08-07-2008, 07:19 PM

BTW gxm... you say your htaccess doesn't "stop" them... are you sure you're not just seeing the log entries for 403/forbidden? The attempt to fetch will still happen, but Apache will block them at that point so all they get back is a 403 error.

qxm · 08-07-2008, 07:30 PM

Quote:

Originally Posted by rowan

BTW gxm... you say your htaccess doesn't "stop" them... are you sure you're not just seeing the log entries for 403/forbidden? The attempt to fetch will still happen, but Apache will block them at that point so all they get back is a 403 error.

well... if they were attempting to grab the content and only getting 404s I am pretty sure my stats wouldn't show 10-30GB of daily usage.....right?

I am checking the referring URLs by document and they all go to .jpg, wmv, mpg

rowan · 08-07-2008, 07:40 PM

Check your raw apache logs and see what the return status is. 200=content delivered, 403=forbidden

qxm · 08-07-2008, 07:49 PM

I see lots of 200 and 206s.......hopefully blocking them by IP will do the trick.....

Warlock77 · 08-08-2008, 06:01 AM

The main site is: elreyano.com (now redirecting to puteros.com) maybe you want to block these domains

Tat2Jr · 08-08-2008, 07:45 AM

Quote:

Originally Posted by Warlock77

The main site is: elreyano.com (now redirecting to puteros.com) maybe you want to block these domains

WARNING!
puteros.com popped up a virus alert from Avira anti-virus. Even while using Firefox with the "no script" extention installed. Don't visit elreyano.com!

SpicyM · 08-08-2008, 07:48 AM

if you block them via htaccess and redirect to lets say 404 they might still appear in your stats.. So they are maybe blocked already but you still think they suck your BW. I believe htaccess is more than good for this, I know that site too, they are like the hun just 3x bigger and 10x shittier lol

GrouchyAdmin · 08-08-2008, 07:51 AM

The [F] stanza forces a 403, people.

u-Bob · 08-08-2008, 07:58 AM

Quote:

Originally Posted by directfiesta

Their Ip is : 72.232.73.2

If dedicated, block them at the firewall level.

If virtual with a Control panel ( like Cpanel ) , check for a blocking feature.

won't do any good if they are "hotlinking"...

08-07-2008, 06:08 PM	#2
directfiesta Too lazy to set a custom title Industry Role: Join Date: Oct 2002 Location: Punta Cana, DR Posts: 29,585	Their Ip is : 72.232.73.2 If dedicated, block them at the firewall level. If virtual with a Control panel ( like Cpanel ) , check for a blocking feature. __________________ I know that Asspimple is stoopid ... As he says, it is a FACT ! But I can't figure out how he can breathe or type , at the same time ....

08-07-2008, 06:33 PM	#3
AlCapone Confirmed User Join Date: Sep 2003 Posts: 708	Why blockin'? __________________ "You can get more with a kind word and a gun than you can with a kind word alone.”

08-07-2008, 06:42 PM	#4
qxm Confirmed User Join Date: Jul 2006 Location: NoHo Posts: 5,970	ahhh there we go.... it was easy to block them at the firewall level with FreeBSD ... thanks for the hint m8 I was going nuts with the freaking .htaccess .... __________________ ICQ: 266990876

08-07-2008, 07:49 PM	#10
qxm Confirmed User Join Date: Jul 2006 Location: NoHo Posts: 5,970	I see lots of 200 and 206s.......hopefully blocking them by IP will do the trick..... __________________ ICQ: 266990876

08-08-2008, 07:51 AM	#14
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	The [F] stanza forces a 403, people. __________________ AIM: GrouchyGfy

08-07-2008, 07:19 PM	#7
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	BTW gxm... you say your htaccess doesn't "stop" them... are you sure you're not just seeing the log entries for 403/forbidden? The attempt to fetch will still happen, but Apache will block them at that point so all they get back is a 403 error.

08-07-2008, 07:40 PM	#9
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Check your raw apache logs and see what the return status is. 200=content delivered, 403=forbidden

08-08-2008, 06:01 AM	#11
Warlock77 Confirmed User Industry Role: Join Date: Apr 2004 Posts: 246	The main site is: elreyano.com (now redirecting to puteros.com) maybe you want to block these domains

08-08-2008, 07:48 AM	#13
SpicyM Confirmed User Industry Role: Join Date: Aug 2006 Posts: 4,535	if you block them via htaccess and redirect to lets say 404 they might still appear in your stats.. So they are maybe blocked already but you still think they suck your BW. I believe htaccess is more than good for this, I know that site too, they are like the hun just 3x bigger and 10x shittier lol