Shaun, I see the problem. The request you’re sending isn’t setting the user agent field:
72.10.44.23 - - [19/Feb/2007:18:47:08 -0800] "GET /mint/? HTTP/1.1" 403 - "-" "-"
Looking at my logs, I noticed a bunch of requests a while back with no user agent string set to random pages and figured they were email address harvesters for spam, so I forbid access for blank user agents.