dstiles - 7:16 pm on Jul 13, 2013 (gmt 0)
keyplr - sounds a bit ambiguous: could go either way.
Having said that, I've blocked two IPs from the range in the past few days for using http/1.0 but since a lot of proxy/firewalls use that it's not decisive. They may be browsing through a disguised proxy. The IPs were adjacent so it's possibly a biz group (say, /26). I could not find any open ports and being Saturday that may make sense for a biz that shuts down their system on a weekend.