[Gllug] Presumably this is someone trying to DOS me?

[Adrian McMenamin]

See the httpd access_log fragment below... I get a series of these every
six hours or so and the numbers appear to be building albeit very
slowly. Nothing to worry about now, but might be in the future... as the
IP is an aol address it is well chosen by the attacker to make it
difficult to block ... unless someone has an alternative explanation?


195.93.21.98 - - [30/May/2005:19:42:30 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:19:43:04 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:19:43:29 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:19:52:44 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:23:50 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:32:02 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:32:38 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:32:50 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:33:46 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:35:14 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:37:47 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:38:31 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:45:18 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:46:11 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:47:01 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:47:36 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:47:50 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:48:44 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:52:40 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:53:04 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:20:57:11 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:06:22 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:08:48 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:09:22 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:10:35 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:11:46 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:12:59 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:13:34 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:18:28 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:19:04 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:21:00 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:21:38 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:23:16 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:23:26 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:25:47 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:25:59 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:28:46 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:30:21 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:30:57 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:31:22 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:34:00 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:35:30 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"
195.93.21.98 - - [30/May/2005:21:36:09 +0100] "HEAD / HTTP/1.1" 200 0
"-" "-"

-- 
Adrian McMenamin <adrian at mcmen.demon.co.uk>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20050602/1800908b/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug