I was looking at a client's site ftp.log and noticed this: 12.34.56.79 - - [27/May/2011:14:01:30 -0400] "GET /home/.sites/XXX/siteXX/web/info.php HTTP/1.0" 200 161 "http://d/" http://www.domain.com/ All of the entries are http://d/ or http://i/ or "http://o/" Thoughts?