90 minute attack today

[dcheney]

Howdy,
I had an interesting "attack" in my logs today. Over the course of about 90 minutes 1 host (host201.lssi.com) made 66,937 total requests for the same 4 files (resulting in 152 megabytes of data being transferred).
I've contacted the company but have not yet received a response (this was just detected a little while ago when I did some daily log processing).
Has anyone had any problems with this company/group/whatever before?

[jdMorgan]

Never heard of 'em - but www.lssi.com gives a library services company - Another bunch that thinks they are entitled to our bandwidth, I guess...

Did they fetch robots.txt, or show any signs of "socially redeeming value"? My gut feel is to ban 'em now, before I get hit!

Jim

[dcheney]

nope, no attempt to get robots.txt.

The only files they got (almost 67,000 times) were the index.html, 2 support .js files, and the privacy policy.

[jdMorgan]

...sounds like their script needs some work.

I'll be interested to hear what they say if they reply to you.

Jim

[dcheney]

I got an email response basically saying they are investigating. I'll let ya'll know when/if I hear more.