### On Tue, 18 Sep 2001 17:03:44 -0500, mike@biggorilla.com casually decided
### to expound upon Bill McGonigle <mcgonigle@medicalmedia.com> the
### following thoughts about "Re: Pattern matching odd HTTP request":
* Bill McGonigle (mcgonigle@medicalmedia.com) [09/18/01 15:43]:
>
>
> >
> > Anyone seeing a lot of these in their webserver logs?
> >
> > 208.202.180.4 - - [18/Sep/2001:11:19:31 -0700] "-" 408 -
>
> This machine is in my /8
>
> -----
> 207.202.84.209 - - [18/Sep/2001:15:16:48 -0400] "-" 408 -
> 207.202.84.209 - - [18/Sep/2001:15:18:18 -0400] "-" 408 -
> 207.202.84.209 - - [18/Sep/2001:15:19:48 -0400] "-" 408 -Doesn't seem new...
195.188.192.18 - - [13/Sep/1999:02:23:43 -0500] "-" 408 - "-" "-"
195.188.192.18 - - [14/Sep/1999:02:18:54 -0500] "-" 408 - "-" "-"But just a little more increased.
Yeah. I was trying to figure out a way to match it in my NBAR filters but I
can't seem to find a pattern that works.