Many hits from KHP059140020003.ppp-bb.dion.ne.jp (59.140.20.3)

[Rory_A]

Hi,

A few of our members have reported that the IP address 59.140.20.3 is hammering their sites with hundreds and thousands of hits. I believe this is a web crawler or some sort of program and not an actual user. If this is happening to you please add the IP in question to your IP blocking settings. To try and block this IP from visiting your page at all please contact your web hosting provider and ask them how you should go about doing this.

If you'd like to report this person to their ISP the email addresses are abuse@dion.ne.jp and abuse@kddi.com.

How to setup IP blocking

1. Login to StatCounter.

2. Click the mini-wrench icon to the right of the project name you want to modify.

3. Click the "Edit Settings" link.

4. Towards the bottom there is a section named "IP Blocking". Enter the IP address here.

5. Check the box in the section called "Update IP Blocking in All Projects?" if you want to block your visits in all of your projects.

6. Click the "Edit Project" button.

After that this IP addresses visits should no longer show up in your log.

Thanks and have a great day!
Rory

[JWJ]

Thanks for this Rory. I hadn't realised I'd been getting hit until I did an IP Lookup in my projects. I've now blocked the perpetrator from site entirely by inserting a 'Deny' in my htaccess file. For anyone else with an htaccess file, just add the follow lines ...

order allow,deny
deny from 59.140.20.3
allow from all

[BGL]

I got hit w/this yesterday evening+/night fairly hard, it stopped all stats tracking for several++ hours (until morning+) & took about 22-23 pages of stats, which were frozen in time.

[webado]

Creepers! I got that one too!

Will have to ask my hoster to block it from everybody because it can cause havoc.

I have too many sites to do each one individually.

[dreiden]

Got it as well, it's ridiculous.

Aside form blocking in stats counter i'm updating my HTACCESS to deny access formt hat IP cluster, I find this works well in preventing unwanted visitors to the site

Order Allow,Deny
Deny from 59.140.20.
allow from all

Just noticed JWJ posted the same thing... so to add to the note I somethimes choose to redirect the perp. to another website all together like this

RewriteCond %{REMOTE_ADDR} ^59\.140\.20\.3$
RewriteRule .* http://www.jnto.go.jp/ [R,L]

In this case the Japan National Tourist Organization

Dreiden

[winipoo]

Thank you for directing me to this thread, Jenni.

What alarms me about the hits is that one of the landing pages was actually a google web query that a client entered my site from.

The landing page was stated as:

72.14.205.104/search?q=cache:bqVZV2uosYoJ:http://www.winipoojewelry.com/store/...n%22&hl=en&ct=

How would this "bot" get such information??? It seems like something specific to Statcounter!

Fascinating to me also, about all these hits, is that it is finding webpages I didn't even know I had!! Sheesh!

Regards,
Kirsten

[winipoo]

When I Googled the KHP059...

I found this page:

http://www.kaburu.com/

What do you make of that??

~Kirsten

[webado]

Originally Posted by winipoo

Thank you for directing me to this thread, Jenni.

What alarms me about the hits is that one of the landing pages was actually a google web query that a client entered my site from.

The landing page was stated as:

72.14.205.104/search?q=cache:bqVZV2uosYoJ:http://www.winipoojewelry.com/store/...n%22&hl=en&ct=

How would this "bot" get such information??? It seems like something specific to Statcounter!

Fascinating to me also, about all these hits, is that it is finding webpages I didn't even know I had!! Sheesh!

Regards,
Kirsten

That's not a query. Or rather the query was a site: query for your domain, followed by the searcher clicking the cache link for one of your pages. The cached copy of you page has Statcounter tracking code on it, so if anybody views that cache, the hit is registered to it.

The robot could of course have picked it from a link to your cache posted somewhere, like maybe in a forum link this.

[winipoo]

Thanks for clarifying, Christine

[Sharron]

wow I got it today!

Number of Entries:
Entry Page Time:
Visit Length:
Browser
OS
Resolution486
13th October 2008 14:25:42
0 seconds


unknownReturning Visits:
Location:
Hostname:
Entry Page:
Exit Page:
Referring URL:0
Tokyo Japan
KHP059140020003.ppp-bb.dion.ne.jp (59.140.20.3) Funy thing is it went to a development folder, guess I can delete it now!

now for the htaccess block, wish I could sent it back to itself!