Slightly odd one here. UA BunnySlippers (no version number or anything) using ip class c 131.107.3 . I say that it is odd because the page they requested was as it appears in display form in AV I think - the url is long, and the central bit is replaced with an elipsis (ie ... ).
The class c resolves to microsoft.