I noticed a bit of traffic, starting with David Berlind, about people looking for visits from iPhones in their web-server logfiles. I looked in mine, and found a couple. I thought I’d reproduce the actual Apache logfile entry, which is kind of interesting; do your own interpretation.
Unless you’ve spent some quality time doing Web traffic analysis, this will probably be gibberish to you.
a17-202-23-209.apple.com - - [31/May/2007:10:39:58 -0700] "GET /ongoing/When/200x/2003/04/21/Emoji.png HTTP/1.1" 200 2374 "http://greg.abstrakt.ch/tag/mobile" "Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A542a Safari/419.3"
Not too many surprises in there, I’d say.
Contributions
Comment feed for ongoing:
From: walter (Jun 18 2007, at 17:00)
Well there is one question that came to mind: who already has an iPhone and is also a reader of Ongoing... Jonathan?
[link]
From: Tim (Jun 18 2007, at 17:58)
"abstrakt.ch" - somewhere in Switzerland?? Is this perhaps an HTTP client reporting itself to be an iPhone?
[link]
From: James Justin Harrell (Jun 18 2007, at 18:16)
Wow, those User-Agent strings are getting worse and worse.
[link]
From: Bill (Jun 18 2007, at 18:22)
It looks fake. Safari v3.0 sounds right, but my OS X 10.4.9 Safari 2.04 claims to be build 419.3. It's not like some browsers make it hard to spoof the browser string. I have only downloaded 3.0 for Windows but I'm not sure of the build number it has.
Somebody's probably just messing with you.
[link]
From: Gregor J. Rothfuss (Jun 18 2007, at 23:03)
Heh. I am seeing them too:
17.202.23.209 - - [31/May/2007:19:39:43 +0200] "GET /tag/mobile HTTP/1.1" 200 59673 "-" "Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A542a Safari/419.3"
For the doubters:
nslookup 17.202.23.209
Server: 195.226.6.19
Address: 195.226.6.19#53
Non-authoritative answer:
209.23.202.17.in-addr.arpa name = A17-202-23-209.apple.com.
[link]
From: Robert Pesterfield (Jun 18 2007, at 23:32)
You're aware user agent strings can be spoofed right? Sorry to burst your bubble but perhaps you haven't had any iPhone users hit ongoing.
[link]
From: walter (Jun 19 2007, at 07:54)
@robert: "iPhone users hit ongoing." .... i am not sure it's a spoof. it makes sense that lots of folks inside apple have iPhones and they are testing out the mobile version of safari by visting their usual favourite blogs and web sites. oh yeah ... ten days to iPhone Launch Date!
[link]