in httpd.conf
<IfModule hmod_allowmethods> AllowMethods GET POST OPTIONS </IfModule>
In each VirtualHost directive
## Disallow OPTIONS METHOD
RewriteEngine On
RewriteCond %{REQUEST_METHOD} !(GET|POST)
RewriteRule .* - [F]
This seems to stop the majority of the requests
