Not sure what's going on here. I run a vB forum on one of my sites - I'm looking at the logs and the bandwidth has shot up from 15 MB's a day (yes that's quiet) to 400MBs. I can't see any pages in the site that are getting hit, or any obvious referrers in the log. This seems to be the problem: 207.210.112.19 Pages: 26429 Hits: 26445 BW: 616.51 MB And the file that's got the biggest traffic is: /forums/showthread.php There's nothing in the bots section that matches that sort of file transfer and like I say, there's no obvious referrer that I can spot. I'm stumped as to what's happening. Any ideas? Am I being scraped or something? The IP address 207.210.112.19 doesn't seem to be anything other than a web host? I've blocked it for now, but I'm at a loss as to what it is and why it's needed to eat up over 600mbs of bandwidth.
Could be some sort of website downloader that's defective and stuck on repeatedly downloading the same file. Odds are, you might never find out what it is - I'd just stick to the IP ban you put in place, cross your fingers, and hope it never happens again.
I took a look at the log file, and it's looks like its followed every link on the site, all sorts of query strings are there so I think the weight may be because it's hit the same content over and over by lots of different iterations of the URL. The IP ban is a fairly moot thing - they could have been spoofing it to start with - I'd just like to know what they were up to.
i That was what I was going to post. I think it is some kind of program stealing information to repost somewhere else.
That would be nice, but most of the time they are stealing postings and content and some mix them up to look original and others just copy word for word without the links.
http://www.quepublishing.com/articles/article.asp?p=421057&seqNum=3&rl=1 Check that link out...It should help.
207.210.112.19 UNITED STATES GEORGIA ATLANTA GLOBAL NET ACCESS LLC www.gnax.com either block this ip or contact the ISP and lodge a complain.