Yeah, I got a load of those bots too. Not sure if it's the same as yours but from what I can see in the system log, most appear to look for vulnerabilies by try

Yeah, I got a load of those bots too. Not sure if it's the same as yours but from what I can see in the system log, most appear to look for vulnerabilies by trying to access places like '/admin' or '/passwd'. Thankfully a RewriteRule in .htaccess catches most of these although I can't help think if there's anything else I missed, security related. :\