I've been getting those for weeks. I think it's related to some pay-per-click fraud being run out of the Beijing area (although I see the IP address you cited is in Korea) - for awhile, my bandwidth usage shot through the roof because the guy was using my site's banner somehow (so you might want to check to see if you're getting unusually high numbers of page requests for one particular graphic). I originally thought it was something specific to Drupal because the only domain of mine that was getting hit was the one where I was only running Drupal, but maybe I just got unlucky.

Adam Gaffin Executive Editor, Network World Fusion agaffin@nww.com / (508) 490-6433 / http://www.nwfusion.com "I programmed my robotic dog to bite the guy who delivers the electronic mail." -- Kibo

on a fairly new and unpublicized site, we're getting this in the logs

Type httpd Date Friday, January 21, 2005 - 16:15

User Anonymous Location http://hpcgi1.nifty.com:80/trino/ProxyJ/prxjdg.cgi

Message 404 error: trino/ProxyJ/prxjdg.cgi not found. Hostname 211.200.8.200

several times a day, these show up as often as one or more a minute, but are sometimes a couple minutes apart.

nifty.com is apparently a Japanese ISP, based on a few scattered English words on their site.