Something fishy going on?

Frankc

Well-Known Member
Joined
Dec 21, 2005
Messages
242
Reaction score
3
Not too long ago our bandwidth raised with almost 40 000 mb within about 2 days and after investigation it appears that was a bot from funnel.co.za that seems to be “stuck in a loop” or whatever since the few websites involved was not even 50 mb in total.

With the high price of bandwidth in SA this of course rock our pocket like hell so we block funnel.co.za from all our servers. (By the way. In UK we pay R3000 for a server with 300GB bandwidth. In SA, such bandwidth would cost around R27 000)

After that we moved almost all our websites to UK servers and since then never got such crazy bandwidth usage again. (with hundreds of websites)

Recently I moved 4 domains back to our local server and within less than a week there was again a sharp increase in bandwidth usage 2000 mb within short period on one website that is only 15mb big but we blocked the bot from zen.co.za in time.

After some investigation it appears that both funnel.co.za and zen.co.za are “search engines” with both of them not in operation yet at the time of this incidents. Both of them are also within the Internet Solutions IP range.

What I don’t like and sounds fishy to me is why the hell would both of them be either faultily or programmed in such way that it hit the same website over and over and over again?

The reality of the situation is that there is NO valid or logical reason for a bot to increase bandwidth usage so much unless there are some hidden motives behind that.

It would be difficult to determine WHAT but it would for example be easy for a place like Internet Solutions to run such a program on the websites of clients at the competition. (IS charge way more for bandwidth and server hosting than some competitors) or for Telkom to run such a program to increase their income.

Fact of the matter is that bandwidth in SA is so EXPENSIVE that normal, standard and no business in their right mind would ran up to much bandwidth for nothing.

Remember it is a dual charge because WE must pay for such bandwidth AND they must pay for such bandwidth too. With for example 40 000mb bandwidth charged to our account within 2 days, how much bandwidth would it be if the bot did the same with 100 or 1000 or 10 000 websites over one month period?

Funny thing is that, over a period of about 2 years, it is ALWAYS our local servers that got such bandwidth increase due to these bots but never our international sites, some precise identical than the local ones.

About 90% of our almost thousand of websites are on international servers with MANY of them in the Nr.1 or other high search engine spot. The local ones also links direct to many of our international hosted sites so why did the bot not followed the links to the international hosted sites????

And lastly. Why the shi t would the bot use 2000 mb bandwidth for a 15mb site within hours unless it was programmed to do so with the specific aim to increase bandwidth?
 
v interesting - they must check the tld + country of the netblock before hammering you.

Is it the same request over and over or are they spidering, do they pull images etc?
 
Surely if the bot generates 2GB of traffic on your side it must do the same on their side. Imagine their bandwidth usage if the bot downloads more than 1GB of data per day per website. If their are 10,000 websites in their index that amounts to 10TB of data per day.
 
Just stick this into the bot's mouth and hope it crashes :D

The main site is here :D

I'm monitoring our bandwidth usage on a regular basis, and should I discover such a nasty leeching bandwidth off us, then it's gonna be blocked...
 
Clever okes would program their Linux boxen to redirect said bot to slurp bandwidth off Telkom's site :D

Should be possible... :)
 
Seems like you should be able to sue the search engine operators in question for .. um .. something.

It's not theft but it's ..

Sending unsolicited faxes for example is illegal because the recipient is paying to receive your crap. This sounds similar.
 
Hi,

Has anyone else had any issues with this 'zenbot' or know how to block it? I have a customers site that recorded well over 2gig traffic in the last 2 days and 99% of that is generated by this freakin zenbot. At the normal overage prices, thats nearly R1000 extra for traffic caused by some idiots search engine, which isnt even live!!

Anyone have any ideas on sueing these idiots or getting them shutdown or anything?? This is crazy!

I've got about 200 000 page views in the last 2 days from this zenbot... see below a line from my IIS logfiles:
196.211.99.196 HTTP/1.0 Mozilla/5.0+(compatible;+Zenbot/1.3;++http://zen.co.za/webmasters/)

Any help greatly appreciated.
 
Top
Sign up to the MyBroadband newsletter
X