Multiple UA's

[wilderness]

Normally, I would not further the awareness of the IP.
A google on the final UA was hopeless.

207.177.51.zzz - - [09/Nov/2007:16:03:18 -0600] "GET / HTTP/1.1" 403 - "-" "libwww-perl/5.805"
207.177.51.zzz - - [09/Nov/2007:16:03:18 -0600] "GET / HTTP/1.1" 403 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050223 Firefox/1.0.1"
207.177.51.zzz - - [09/Nov/2007:16:03:18 -0600] "GET / HTTP/1.1" 200 8329 "-" "Blazer"

[thetrasher]

G-Search for that IP leads to "The Iowa Source"? They took my start page in 2006-07 with UA "libwww-perl/5.803".

[incrediBILL]

The source is from natel.net in IA and they supply all sorts of services so it's hard to say exactly whether what you're seeing is via some DHCP connection, a customer proxy, or maybe something hosted in their data center.

Would need more info to nail it down.

[wilderness]

Bill,
Are there any subnet ranges of the backbone regarding separations of ARIN vs RIPE or is the backbone primarily RIPE?

TIA

Don

[incrediBILL]

This one is in ARIN, not sure why you think it's in RIPE...

[wilderness]

The source is from natel.net in IA

not sure why you think it's in RIPE

Read quickly and assumed the IA to be a Euro country designation.

[keyplyr]

If you go to their homepage, they seem fairly harmless. Many Euro services don't seem to follow the same netiquette as we'd like them to. And many mobile utilities never ask for robots.txt either (even Google mobile.) Why they change their UA in your examples is probably because they were getting 403s and may have have been fishing for a UA that worked.