I was able to get the actual ip range of the hn.kd.ny.adsl attacker. It seems the attacker uses compromised machines to do http attacks or perhaps bruteforce. Very strange indeed.
182.118.*.* seems to have some compromised servers trying an http attack on my linux box?
I shall keep monitoring...