Unidentified grabber of pages....

63.148.99.246..What's up with this guy?

[BuckerBucker]

I notice 63.148.99.246 accessing all of my pages, even download pages that he shouldn't be touching without paying first. He was coming once a month and in my logs it showed him looking at each of my pages. Recently, he is coming about twice a week. He never stays long, just long enough to grab my pages. Is he human, is he metal, or is he an insect. I surely don't know......can anybody help? Do I need to ignore, unplug or spray raid?

[southarkwright]

well this is where he's coming from:

http://centralops.net/co/DomainDossier.vbs.asp?addr=63.148.99.246&dom_whois=true
&dom_dns=true&traceroute=true&net_whois=true&svc_scan=true

[edited by: DaveAtIFG at 10:30 pm (utc) on Feb. 20, 2004]
[edit reason] DeLinked [/edit]

[BuckerBucker]

Thanks Southarkwrigt for your great help......I guess if you do business on the internet, you have to expect the intrusive probes along with the legitimate business. Maybe it means I'm becoming relevant....I hope! Thanks again.

[encyclo]

From the address, this looks like a "bot" from some people called Cyveillance which searches sites for copyright violations and “damaging information” for large companies (such as the RIAA/MPAA, etc.). The robot's User-Agent looks like Internet Explorer. Last I heard, it completely ignores robots.txt. Try: h**p://www.cyveillance.com/ for more info.

If you are using Apache and have mod_rewrite, you can ban them. Try this for starters:

Options +FollowSymlinks 
RewriteEngine On 
RewriteBase / 
RewriteCond %{REMOTE_ADDR} "^63\.148\.99\.2(2[4-9]¦[3-4][0-9]¦5[0-5])$" 
RewriteRule .* - [F,L]

This will issue a 403 Forbidden error code for your site for just their IP addresses.

[BuckerBucker]

Thanks Encylo for the added info...Is that coded inside the /head portion? And how do I know if I have an Apache server? My host is bCentral...I looked everywhere for some kind of indication but could find none. Thanks again for your help.

[bcolflesh]

My host is bCentral

It's a good bet that MS bCentral won't have Apache.

[encyclo]

If you're on a Windows server (which is more or less guaranteed if your hosted by bCentral!), the code I gave you won't work. I'm a Linux guy, and I don't know how to ban an IP range on IIS - you may want to search or pose the question in the Microsoft forum here on WebmasterWorld: [webmasterworld.com...] where there are loads of people who will know the answer.