martyboy wrote:
Hey, glad to see you got some of your problem solved, protector is agreat module for stopping refresh attacks and high loading crawlers.

For the offline downloading you will have to try and ban them using htaccess like i posted above, you need to know the user agent so you can ban by user agent, searching on google might bring up good lists of user agents to ban.

You might also set up some kind of honey pot to catch them, ive never tried this so im not sure how efective it is but you could create a directory within your site which is not puclic and no one knows about name it something like kjsahfj87825jh like really random so no human could guess it put in a few images then wait a week or so, check your access logs and look to see who/what has downloaded that directory and bingo you have your bad bots(dissalow the directory in robots.txt first), and offline downloaders check the ip's and useragents and ban them with htaccess.

This will probably only work if someone is typing your main URL into the downloading software and downloading your entire site, its worth a try the more bad useragents and ips you ban might at least reduce your bandwidth usage a bit.