Help from the GFY Detectives?
 

Hey Guys...
Through our cpanel I checked webalizer and found this one user

softbank220007027136.bbtec.net

(Softbank is a Japanese internet provider),

the user is sucking up tons of bandwidth from our network.

Does anyone have a suggestion or a way to figure out that fuckwads IP address? We need to ban them and drop a note to softbank.

That aside whats the most effective way to block the prick?

Your help would really be appreciated.

RJ and Haruka

Resolves to IP: 220.7.27.136

is he a member of your paysites?

I think we picked them up after some posts on reddit... :(

220.7.27.136

Since you have cpanel just enter that ip address into the "IP Deny Manager".

Thanks guys...We wanted to be sure about it. Thought it might be a dynamic IP...

Dark Jedi
Not on our paysites, but on one of our Japanese blogs.

We use an htaccess file to block...
Looks like an image scraper...

nslookup softbank220007027136.bbtec.net

Non-authoritative answer:
Name: softbank220007027136.bbtec.net
Address: 220.7.27.136


inetnum: 220.0.0.0 - 220.63.255.255
netname: BBTECH
descr: Japan nation-wide Network of SOFTBANK BB CORP
descr: Tokyo, Japan
country: JP
admin-c: SA421-AP
tech-c: SA421-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-JP-BBTECH
changed: [email protected] 20020412
changed: [email protected] 20030616
status: ALLOCATED PORTABLE
changed: [email protected] 20081031
source: APNIC

role: SoftbankBB ABUSE
address: Tokyo Shiodome bldg., 1-9-1, Higashi-Shimbashi, Minatoku,Tokyo
country: JP
phone: +81-3-6688-5120
e-mail: [email protected]
remarks: Please send spam report,virus alart
remarks: or any other abuse report
remarks: to [email protected]
remarks: Any other Information, Notice,
remarks: Please send to [email protected]
admin-c: ST222-AP
tech-c: ST222-AP
nic-hdl: SA421-AP
notify: [email protected]
mnt-by: MAINT-JP-BBTECH
changed: [email protected] 20081030
source: APNIC
changed: [email protected] 20111114

CYF...Awesome info. Thank you very much. Going to drop a note to the host.

cPanel > IP Deny > 220.0.0.0-220.63.255.255

Kill the whole range in case its a dynamic.

What note? That he likes your free blogs?

http://www.darksidedata.com/rolleyes.gif

Naw...lol...The IP originates in a prefecture that is often described as third world or as Africa...of Japan.

What he is doing is illegal in Japan, downloading uncensored content. He can be arrested for it actually and lose his service, pay a fine, forced to fuck western girls...something bad, :1orglaugh:1orglaugh

I dont mind grabbing a few pics but he is overpowering the servers...he's got a bot running 24/7-so our host is on it as well.