Creepy stuff

Who runs http://www.vroomfondel.co.uk? Also, why do they keep scanning through my blog? They do so through this page and seem particularly interested in anything involving NatWest: the bank where I foolishly opened an international student account.

Is anyone else getting several hits a day from these people? I don’t know who they are, but their URL is registered at the following address:

c/o Net Rank
Suite 1c, Western Way,
Exeter,
Devon
EX1 2DE
GB

Suffice it to say, I do not appreciate their attentions, at least so long as I don’t know who they are or what they are doing. If you run your own server, it is easy enough to ban people referred directly from their strange login site. Just add this to your .htaccess file:

RewriteCond %{HTTP_REFERER} vroomfondel\.co.uk [NC]
RewriteRule .* – [F]

Depending how automated the system is, that might foil it. If it is run by a group of people working through that portal, they will be able to find another way to access your site, regardless of the above addition to your .htaccess file.

Author: Milan

In the spring of 2005, I graduated from the University of British Columbia with a degree in International Relations and a general focus in the area of environmental politics. In the fall of 2005, I began reading for an M.Phil in IR at Wadham College, Oxford. Outside school, I am very interested in photography, writing, and the outdoors. I am writing this blog to keep in touch with friends and family around the world, provide a more personal view of graduate student life in Oxford, and pass on some lessons I've learned here.

10 thoughts on “Creepy stuff”

  1. You can also access their server via secure shell (ssh) at 212.104.147.114, port 22.

    Furthermore, that IP has further address information.

    James Tyrrell
    c/o Eclipse Internet
    Portland House, Longbrook Street
    Exeter, Devon EX4 6AB
    +44 1392 333309
    jim@eclipse.net.uk

    That said, I think Eclipse Internet is just the company that whoever runs vroomfondel.co.uk is buying hosting from.

  2. To me, it seems more likely that some ad firm they hired is doing this, if it even has anything to do with NatWest.

  3. I sent a question to NatWest, to see if they know anything about Vroomfondel.co.uk. I got the following less than informative message back:

    Dear Mr Ilnyckyj

    Thank you for your message received via our web site.

    The comments you have made have been passed to the appropriate department
    for further investigation.

    If you have any specific concerns regarding your accounts, I would recommend
    that you send details of them either via the feedback form on the
    NatWest.com site or directly to your branch.

    Yours sincerely

    J Holmes
    OnLine Banking Technical Team

  4. The Vroomfondel people seem to have no trouble getting past the htaccess settings above. They continue to crawl through my site without explanation.

Leave a Reply

Your email address will not be published. Required fields are marked *