Large traffic from 63.124.220.148?

I'm getting a ton of traffic from this IP, anybody else?

[oatleyd]

For the past few days I've been getting pounded by IP Address 63.124.220.148. I can't get it to resolve to a name. Traceroute's last resolved name is POS7-0.GW2.DCA8.ALTER.NET at IP 152.63.39.149

It isn't hurting anything, but it's weird. I'm a small site (but working on it!) and better than half of my traffic is this guy. I see google bot's and alexa's and the search engine bots out here, so I don't think it's them. He apparently isn't using a javascript-enabled browser, since he doesn't show up in my Google Adsense stats, so he's probably a bot of some kind. He's generating more hits than I have files in my site, so I don't think it's just crawling.

I can't tell what he's accessing from here, since I don't have access to my logs. (I'm at work.) But if anyone's interested, I can look it up from home.

Any ideas? Should I care? (I don't, I'm just curious)

Thanks!

-Dave

[redzone]

Arin shows the IP to the UUNET network:

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: [phone]
OrgAbuseEmail: [e-mail]

[pendanticist]

oatleyd

Could you post the UA string so we can see what the User Agent was? IPs can change (especially after being forced to), but UAs will morph.

[oatleyd]

I'll have to dig that up from home, I only have access to stripped-down stats here at work. I'll try to post more details tonight.

Thanks, folks!

[oatleyd]

OK, well, it looks more like a person now. The hits come every few minutes, and they keep going back to the archive page, like a person perusing. But they downloaded the archive page and one particular story over a hundred times over the course of a couple of hours. Weird?

It looks like it started in a Google Groups search, and at that point the user agent was:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

But after 20 or so files were downloaded, the user agent switched to:
MSProxy/2.0

Apparently it downloaded the images and the javascript source files, as if it were a real person. (Clearly a very bored person. I like my site, too, but I wouldn't read it 100 times!)

I'm not complaining. If somebody wants to bang their head against my site, go for it. Like I said, I was just curious.

Thanks all for the help,

Dave

[oatleyd]

And just for kicks, it's back again this morning. Yesterday it hit me 308 times. Today it's 309. This is so weird.