lucy24 - 12:25 am on Nov 25, 2013 (gmt 0)
Does anyone know for sure what this is?
188.8.131.52 - - [23/Nov/2013:07:38:12 -0800] "GET / HTTP/1.1" 200 1867 "-" "Mozilla/5.0 (Windows NT 6.1; rv:6.0) Gecko/20110814 Firefox/6.0"
184.108.40.206 - - [23/Nov/2013:07:38:13 -0800] "GET /favicon.ico HTTP/1.1" 200 661 "-" "Mozilla/5.0 (Windows NT 6.1; rv:6.0) Gecko/20110814 Firefox/6.0"
That's the full request: front page and favicon only.
The closest match I can find is the snippetbot:
220.127.116.11 - - [01/Sep/2013:03:06:28 -0700] "GET / HTTP/1.1" 403 1497 "-" "Mozilla/5.0 (Windows NT 6.1; rv:6.0) Gecko/20110814 Firefox/6.0 Google (+https://developers.google.com/+/web/snippet/)"
(If it hadn't received a 403 it would have gone on to ask for the favicon-- not realizing that this isn't blocked anyway. A human gets the favicon with their 403 page. This reminds me that I think I've figured out what the snippetbot does. It gets the favicon for any sites you've got listed on your google profile. One of these days I'll unblock it and see if I'm correct.)
The punch line is that I've recently started quasi-blocking FF 6. On my personal site it would have been redirected to "goaway.html". This one coasted through because it was visiting the art studio's site, which doesn't have as detailed an htaccess file.