Welcome to WebmasterWorld Guest from

Forum Moderators: Ocean10000 & incrediBILL & keyplyr

Message Too Old, No Replies

Request for same image via various wireless networks

Mozilla/4.0, No-Referrer, Repeated 1-3 image requests

3:25 pm on Nov 18, 2012 (gmt 0)

Preferred Member

10+ Year Member

joined:Dec 7, 2003
votes: 0

Recently looked at my logs and noticed that there has been repeated requests for just 3 specific images via one specific User-Agent. All with No-Referrer. All from various wireless cell phone networks all over the US, some abroad.

Only 3 images requested. Image1.jpg, Image2.jpg, Image3.jpg
Some networks only request only requests only one, e.g. Image1.jpg but would request it from various IPs within their network.
While others request the same image from the same IP but about 7-20 minutes apart.



(d) IPs
Various cellphone networks. There were multiple requests from all of these networks from either 1+ IPs.
Small sample of some specific IPs, but there are tons more. - United States West Hollywood Verizon Wireless - Wireless Data Service Provider - Vibo Telecom Inc. (Taiwan) - United States Jacksonville Metropcs Wireless Inc. - United States Cleveland T-mobile Usa Inc.


Not sure if I am understanding what is going on but I am trying to serve them a 403 but doesn't seem to work.

RewriteCond %{HTTP_USER_AGENT} ^Mozilla/4\.0$
RewriteCond %{REQUEST_FILENAME} \.(jpeg|jpg|gif|png)$ [NC]
RewriteCond %{HTTP_REFERER} ^-$
RewriteRule .* - [F]

See anything wrong with the code?

Anyone see this on their logs as well? Why are they all requesting the same image.
Note: These images are nothing special and not even the popular ones on my site so that was also one of the reasons I noticed this. Thanks a bunch.
9:05 pm on Nov 18, 2012 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
votes: 3

There are hundred of examples of anti-hotlinking at Webmaster World.

See this 2004 thread and ONLY used jDmorgan's syntax [webmasterworld.com]
9:46 pm on Nov 18, 2012 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
votes: 332

If they are exclusively mobile networks, it's most likely an app that is using the image. I have thousands of musician photos. Media players are always scraping and/or hot-linking to these images for their album cover art.

I check for referrer, and if the request comes from a source other than my own domain, I switch the image to an image file with a warning message.

I also use a mod_rewrite condition that blocks several UAs from getting image files (but allow them to play my media.)

BTW - IMO you'd be blocking a large percentage of human users with the code in your post. They will view your site with NO images. You have to allow your own site (all versions) as referrer.
10:28 pm on Nov 18, 2012 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:Apr 9, 2011
votes: 439

RewriteCond %{REQUEST_FILENAME} \.(jpeg|jpg|gif|png)$ [NC]
RewriteRule .* - [F]

I can't think offhand of a situation where this configuration would be appropriate. Put it into the body of the rule:

RewriteRule \.(jpe?g|gif|png)$ - [F]

Then your server only has to stop and evaluate the conditions when there is a request for an image.

There's some kind of caching setup whose UA is a bare
Mozilla/4.0 (compatible;)
I'm currently getting them in a context where I know they're human-- that is, there was a human to start with. Most are from places in northern Canada where it's satellite or nothing. (Dialup is meaningless because the phones too are satellite.)

:: taking forums' word for it that smiley will disappear on request even though it still shows up in preview ::
3:14 am on Nov 21, 2012 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:July 26, 2006
votes: 0

I've been getting a lot of them as well even though our site isn't really set up for phone traffic.

Haven't blocked them yet and I don't really want to prevent all hotlinking... I like when a forum uses an image or someones little home page... those are fine.... I track them, and add a small banner to the bottom of it after a while so anyone viewing knows where it came from and hopefully I get some traffic out of it.