I ment to say it is always preceded by this

216.38.169.247 - - [24/Jul/2001:11:41:49 -1000] "HEAD / HTTP/1.0" 200 0