The 173.227.72.nn IP belongs to a server farm at TW Telecom.
66.94.233.nn is Yahoo (a range new to me).
209.131.39.nn is also Yahoo.
If the context were different I would say the trailing IPs were actually proxy forwarded-for IPs. I see quite a lot of servers trying to by-pass blocks using proxies; usually broadband botnet ones but also G and Y. Given the mobile connotation that is a feasible scenario but I haven't met proxy forwarded-for IPs in logs before.