Msg#: 4492599 posted 8:29 am on Sep 8, 2012 (gmt 0)
My first guess would have been: just another crummy hotlink stuck on a page whose owner never bothers to look at it. If you're brave, you could check the referer. From someone else's computer, heh heh.
Except that you wouldn't want to.
The first IP is in the middle of a vast Chinese block, 18.104.22.168/10, that came up in another thread just the other day. And what do you know, the other one's China too. 22.214.171.124/13 and 126.96.36.199/12 side by side.
You could slam the door in their faces, though a 404 doesn't really use any more server resources than a 403. It's just the principle of the thing.
Msg#: 4492599 posted 8:36 am on Sep 8, 2012 (gmt 0)
you could use mod_rewrite to supply a 410 Gone or 403 Forbidden response. either status code is a "stronger" signal than a 404 and handling this request in mod_rewrite should take less server resources, although 40 requests/day won't hurt anything.
Thought I would post this as I am trying to learn how to play in the sandbox. :)
Logs revealed today who the offending referrer is: youdao.com.
For the longest time, I got daily hits from 1.202.218.n, as if it was trying to capture Pork Chop Hill on a 2 hour schedule of attacks. Waved my magic 403 wand, but still came back. Seems gone now. Those wile Chinese.