如何排查盗链我网站视频的网站？（cPanel/AwStats/Apache环境）

Hey there! Let's break down how you can track down those video hotlinkers using the tools you already have—cPanel/AwStats, Google Analytics, and Apache. Here's step-by-step what you can do:

AwStats pulls directly from your server logs, so it’s great for catching raw resource requests:

• Log into cPanel, find the AwStats icon, and open the stats for your target domain.
• In the left-hand menu, look for "Referrers" or "URLs with external referrers" (labeling varies slightly by cPanel version). This section lists every external domain linking to your site’s resources.
• Filter results to focus on video file extensions (.mp4, .mov, .flv, etc.). If a random, unauthorized domain shows up with dozens/hundreds of requests for these files, that’s a clear sign of hotlinking.
• Don’t overlook the "Invalid referrers" tab either—some hotlinkers use empty or fake referrers, and this section will flag those odd requests.

GA adds user behavior context, though it won’t catch every raw file request:

• Open your Google Analytics property for the site.
• Navigate to Acquisition > All Traffic > Referrals to see which external domains are sending traffic.
• Filter out your trusted domains (like your own subdomains or partner sites) and look for unfamiliar entries. Cross-check these against requests for your video files by creating a custom report: filter for page paths containing your video extensions, then view the associated referral sources.
• Note: GA only tracks requests that load your website’s pages. If a hotlinker directly embeds your video URL without loading your page, GA won’t pick it up—so rely on AwStats/server logs for full coverage.

For the most granular data, dive into your server’s raw logs:

• In cPanel, find "Raw Access Logs", download the latest log file for your domain, or view it directly in the browser.
• Use command-line tools to filter and analyze video requests (you can run these in a terminal if you have SSH access, or use a text editor’s find function):
  To list IPs, video URLs, and referrers:

  grep ".mp4" yourdomain.com-access_log | awk '{print $1, $7, $11}'
  

  To count how many times each referrer hits your videos (sorted by frequency):

  grep ".mp4" yourdomain.com-access_log | awk '{print $11}' | sort | uniq -c | sort -nr
  

• Look for referrers that are unauthorized domains or empty ("-")—these are your hotlinkers.

Once you’ve identified culprits, use cPanel’s Hotlink Protection to stop them (and confirm your findings):

• In cPanel, open "Hotlink Protection".
• Enable it, then add all domains you want to allow (your main site, authorized partners, etc.).
• Check the box for "Block direct access for these extensions" and list your video file types (.mp4, .mov, etc.).
• Save the settings. After a few hours, check your logs/AwStats again—if the suspicious requests disappear, you’ve confirmed those domains were hotlinking.

内容的提问来源于stack exchange，提问作者Joe