Everyone so often, periodically, I'll get a bunch of these over the course of a couple of hours:

[Mideel/4605][ / ]
Incoming connection from 123203096248.ctinets.com.

[Mideel/4605][ / ]
Incoming connection from 061238129089.ctinets.com.
Incoming connection from 123203096248.ctinets.com.

[Mideel/4605][ / ]
Incoming connection from 061238129089.ctinets.com.



Any idea what that might be? It seems fishy, and the domain resolves to something in Hong Kong…

Proxy server I think. Or a HK ISP.

You might try logging MSSP requests, if you don't already. That way you'll be able to tell if it's a crawler.

traceroute to 061.238.129.089 (61.238.129.89), 30 hops max, 60 byte packets
…
 6  bbr01sgnwmi-tge-0-0-0-11.sgnw.mi.charter.com (96.34.0.55)  26.675 ms  16.500 ms  16.269 ms
 7  cer-edge-17.inet.qwest.net (63.150.198.141)  24.906 ms  23.463 ms  20.780 ms
 8  * * *
 9  xe-4-1-0.chi12.ip4.tinet.net (173.241.131.37)  26.346 ms  26.876 ms 77.67.79.221 (77.67.79.221)  24.881 ms
10  so-3-0-0.hkg11.ip4.tinet.net (89.149.182.190)  241.028 ms  242.456 ms  242.961 ms
11  * * *
12  014136128045.ctinets.com (14.136.128.45)  238.955 ms  245.301 ms  241.647 ms
13  014199252194.ctinets.com (14.199.252.194)  232.402 ms  232.573 ms  232.550 ms
14  * * *
15  061238129089.ctinets.com (61.238.129.89)  233.139 ms  231.605 ms  234.558 ms

and

traceroute to 123.203.096.248 (123.203.96.248), 30 hops max, 60 byte packets
…
 6  bbr01sgnwmi-tge-0-0-0-11.sgnw.mi.charter.com (96.34.0.55)  25.077 ms  22.399 ms  15.535 ms
 7  cer-edge-17.inet.qwest.net (63.150.198.141)  25.081 ms  26.071 ms  22.534 ms
 8  * * *
 9  64.208.110.61 (64.208.110.61)  23.182 ms  26.488 ms  27.866 ms
10  * * *
11  014136128053.ctinets.com (14.136.128.53)  243.368 ms  242.841 ms  241.433 ms
12  014199252182.ctinets.com (14.199.252.182)  229.740 ms  250.142 ms  252.413 ms
13  061239061250.static.ctinets.com (61.239.61.250)  231.702 ms  229.606 ms  230.155 ms
14  * * *
15  123203096248.ctinets.com (123.203.96.248)  228.949 ms  232.391 ms  229.101 ms

and

Registrant:
CTI
   14-16/F, Trans Asia Centre, 18 Kin Hong
   NT
   NO CITY, NO STATE 99999
   HK

   Domain Name: CTINETS.COM

   ————————————————————————
   Promote your business to millions of viewers for only $1 a month
   Learn how you can get an Enhanced Business Listing here for your domain name.
   Learn more at http://www.NetworkSolutions.com/
   ————————————————————————

   Administrative Contact, Technical Contact:
      Hong Kong Broadband Network               hostmaster@HKBN.COM.HK
      16/F Trans Asia Ctr
      18 Kin Hong St Hong, Kwai Chung
      HK
      852 2199 8833 fax: 852 2199 8877


   Record expires on 31-May-2017.
   Record created on 01-Jun-1998.
   Database last updated on 7-Feb-2013 11:05:09 EST.