My stolen content on hacked website redirecting to Spela.com

[jopaa]

Some @*#!&$%## stole my review and posted on a hacked website that redirects to Spela.com.

This is the good man's btag:
hxxxx:// www. spela. com/ sv?btag=660631_3CF9E5F46F794DD2AC06E38330DCB6C5

I think that there are more stolen content because I saw a lot of bot visits coming from different IP's on my images links. The @*#!&$%## didn't have the time to download my images on his server so why not hotlinking?

Please do something.

You can see the hacked website below. You must use Nordic IP otherwise you got some enlargement (you know what) ads or other crap.

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[admin]

A reminder is sent to all affiliate managers.

 

[AussieDave]

That's a Cloudflare IP. Why are you even allowing CF IP (bots) to access your content???

I've had them blocked for ages, along with Amazonaws, Azure, and any other Cloud service that permits nefarious-bots to use their service.

Sorry, but if you don't want this sh#t to happen, then you need to be proactive, by blocking these bots at the front gate (before they even get to any of your pages/content). I've also stopped Google, and others from taking cache pages

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[jopaa]

@AussieDave I have blocked Amazonaws and most major hosting companies but Cloudflare not and I don't even know how to do that because there are so many IP ranges.

I will do a little bit of research and do it ASAP.

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[AussieDave]

Here's all the CF IPV4 block ranges:

.htaccess coding

order allow,deny
allow from all
deny from
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
104.16.0.0/12
108.162.192.0/18
131.0.72.0/22
141.101.64.0/18
162.158.0.0/15
172.64.0.0/13
173.245.48.0/20
188.114.96.0/20
190.93.240.0/20
197.234.240.0/22
198.41.128.0/17

CF IPV6 are:
2400:cb00::/32
2405:b500::/32
2606:4700::/32
2803:f800::/32
2c0f:f248::/32
2a06:98c0::/29

Blocking IPV6 can be a bit tricky, it all depends on how your hosting is setup.

You can try using the same syntax as IVP4. But adding:

deny from 2400:cb00::/32
deny from 2405:b500::/32
etc..., etc...

If that's not compatible with your hosting setup, it will produce a 500 error so just remove the IPV6 and search for another syntax.

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[jopaa]

It works, thank you!

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[AussieDave]

Should also be mindful of spoofed UA's, a common practice where the UA list's itself as Googlebot. However the IP isn't in the Google block range, instead, it's a botnet or something similar

Nothing is 100% secure. But you can make it so 99% of the crap trying it on, get a 403 error. They'll move on to a softer target.

I'd also recommend Using https://dev.maxmind.com/geoip/geoip2/geolite2/ (they have free use IPV4 and IPV6 databases) which allow you to block complete countries. Ukraine is a good start, so too is Russia (no offense to members in these countries). Free DB's are updated every 2 weeks, or maybe once a month... IDK for sure, I use a cron job to download the fresh DB's

If you use Maxmind you'll need to implement different .htaccess coding for that. I have it... But you'll also need to make sure you hosting provide has this setup on their server, otherwise it wont work.

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[admin]

A reminder is sent to all affiliate managers.

 

[jopaa]

I have Wordfence installed that block most of the malicious traffic. They have the paid version that allows you to block entire countries but other than China and Ukraine I am not comfortable to use this feature.

I looked at Maxmind before but I saw lots of reviews saying that by using it you can ban a lot of legit visitors from countries that you don't want to so I'm a bit skeptical.

I think Maxmind can be used for local websites that only accept traffic for one single country.

Anyway, thanks a lot for the tips!

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[eenzoo]

@jopaa - you don't like your China traffic?

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[jopaa]

@eenzoo, I do like China traffic but for some reason all the traffic I get from China comes from bots and scrapers only.

I have a similar player coming from from Russia so, like I said above, I am not comfortable blocking entire countries.

 

[admin]

The Affiliate Management team has been notified of the new post.

 

[eenzoo]

@eenzoo, I do like China traffic but for some reason all the traffic I get from China comes from bots and scrapers only.

I have a similar player coming from from Russia so, like I said above, I am not comfortable blocking entire countries.

That is exactly what i want to say with the pic! There are many more cons to block something than pros. Yes, it is annoying the get hundreds of backlinks from 08/15 sources and it can look a bit scary or dangerous. But I'm pretty sure that scraped or hot-linked stuff can't hurt a healthy site. On the opposite, you can lose some really cool players.

 

[admin]

The Affiliate Management team has been notified of the new post.