Possible DDoS attack?
I am getting hundreds of lines of the same request in my access logs as of July 4th.  This one came up thousands of times in the hours around this date:

`86.128.198.216 - - [22/Jul/2011:00:44:16 +0100] "GET /404.htm HTTP/1.1" 302 414 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB7.1; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C)"`

There are others too - prior to this there were hundreds instances of this:

`92.23.237.48 - - [21/Jul/2011:23:36:24 +0100] "GET /404.htm HTTP/1.1" 302 414 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB6.6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; eSobiSubscriber 2.0.4.16; .NET4.0C; InfoPath.1; BRI/2)"`

And many other similar IPs that are requesting 404.htm hundreds/thousands of time.  Consequently we've exceeded our 100GB bandwidth and our site is currently down.

The website is tiny (with about 2-3000 visits a month) and I just can't really work out what's going on.  Any help/advice would be appreciated as I generally don't deal with the administrator side of the web as, until a few months ago, we had a guy who dealt solely with that.

Waiting for my webhosting company to figure this out is painful.

Thanks,

Rich
Possible DDoS attack?
===

I am getting hundreds of lines of the same request in my access logs as of July 4th.  This one came up thousands of times in the hours around this date:

`86.128.198.216 - - [22/Jul/2011:00:44:16 +0100] "GET /404.htm HTTP/1.1" 302 414 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB7.1; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C)"`

There are others too - prior to this there were hundreds instances of this:

`92.23.237.48 - - [21/Jul/2011:23:36:24 +0100] "GET /404.htm HTTP/1.1" 302 414 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB6.6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; eSobiSubscriber 2.0.4.16; .NET4.0C; InfoPath.1; BRI/2)"`

And many other similar IPs that are requesting 404.htm hundreds/thousands of time.  Consequently we've exceeded our 100GB bandwidth and our site is currently down.

The website is tiny (with about 2-3000 visits a month) and I just can't really work out what's going on.  Any help/advice would be appreciated as I generally don't deal with the administrator side of the web as, until a few months ago, we had a guy who dealt solely with that.

Waiting for my webhosting company to figure this out is painful.

Thanks,

Rich