ModSec rules to block RapidLeech

1. 1. 1. 1. Block .com sharing sites ####

SecRule ARGS_POST ^http://[A-Za-z0-9\.?]+\.(10upload|1fichier|2shared|4shared|adrive|azsharing|badongo|bitshare|depositfiles|easy\.share|egoshare|enterupload|esnips|evilshare|extabit|fileadded|filedino|filedude|filefactory|filefat|fileflyer|filehook|filekeen|fileserve|filesmonster|filesonic|freakshare|gigasize|hotfile|jumbofiles|kewlshare|mediafire|megaporn|megashare|megashares|megaupload|megavideo|midupload|novamov|oron|plunder|rapidshare|rapidvideo|savefile|saveqube|sendspace|sharebomb|sharedzilla|speedyshare|stagevu|torrific|turboupload|ugotfile|uploadbaz|uploadbox|uploading|uploads\.bizhat|uploadstation|videobb|video\.google|videoweed|videozer|vip-file|wupload|youtube|ziddu|zippyshare)\.com.+ "log,deny,msg:'Rapidleech !!'"

SecRule ARGS_POST ^http://(10upload%7C1fichier%7C2shared%7C4shared%7Cadrive%7Cazsharing%7Cbadongo%7Cbitshare%7Cdepositfiles%7Ceasy\.share%7Cegoshare%7Centerupload%7Cesnips%7Cevilshare%7Cextabit%7Cfileadded%7Cfiledino%7Cfiledude%7Cfilefactory%7Cfilefat%7Cfileflyer%7Cfilehook%7Cfilekeen%7Cfileserve%7Cfilesmonster%7Cfilesonic%7Cfreakshare%7Cgigasize%7Chotfile%7Cjumbofiles%7Ckewlshare%7Cmediafire%7Cmegaporn%7Cmegashare%7Cmegashares%7Cmegaupload%7Cmegavideo%7Cmidupload%7Cnovamov%7Coron%7Cplunder%7Crapidshare%7Crapidvideo%7Csavefile%7Csaveqube%7Csendspace%7Csharebomb%7Csharedzilla%7Cspeedyshare%7Cstagevu%7Ctorrific%7Cturboupload%7Cugotfile%7Cuploadbaz%7Cuploadbox%7Cuploading%7Cuploads\.bizhat%7Cuploadstation%7Cvideobb%7Cvideo\.google%7Cvideoweed%7Cvideozer%7Cvip-file%7Cwupload%7Cyoutube%7Cziddu%7Czippyshare)\.com.+ "log,deny,msg:'Rapidleech !!'"

1. 1. 1. 1. Block .net sharing sites ####

SecRule ARGS_POST ^http://[A-Za-z0-9\.?]+\.(bitroad|cash\.file|fileover|filesend|filego|furk|letitbit|movshare|share-now|simpleupload|turbobit|zshare)\.net.+ "log,deny,msg:'Rapidleech !!'"

SecRule ARGS_POST ^http://(bitroad%7Ccash\.file%7Cfileover%7Cfilesend%7Cfilego%7Cfurk%7Cletitbit%7Cmovshare%7Cshare-now%7Csimpleupload%7Cturbobit%7Czshare)\.net.+ "log,deny,msg:'Rapidleech !!'"

1. 1. 1. 1. Block random sharing sites ####

SecRule ARGS_POST ^http://[A-Za-z0-9\.?]+\.(cramit\.in|divxstage\.eu|dl\.free\.fr|downtown\.vc|files\.to|fshare\.vn|ifile\.it|ifolder\.ru| imageshack\.us|netload\.in|rapidshare\.de|sharebase\.to|share\.online\.biz|supershare\.pl|ul\.to|uploaded\.to|videoweed\.es|x7\.to|youload\.to).+ "log,deny,msg:'Rapidleech !!'"

SecRule ARGS_POST ^http://(cramit\.in%7Cdivxstage\.eu%7Cdl\.free\.fr%7Cdowntown\.vc%7Cfiles\.to%7Cfshare\.vn%7Cifile\.it%7Cifolder\.ru%7C imageshack\.us|netload\.in|rapidshare\.de|sharebase\.to|share\.online\.biz|supershare\.pl|ul\.to|uploaded\.to|videoweed\.es|x7\.to|youload\.to)\.com.+ "log,deny,msg:'Rapidleech !!'"