applewebkit/534.30 (khtml like gecko) Real or fake?

[jbrohit]

applewebkit/534.30 (khtml like gecko)

this is fake user agent ?

[dstiles]

Not particularly. It depends on the rest of the user-agent and other fields but applewebkit is used for several browsers including google chrome. There are quite a few things to assess.

[lucy24]

Yes, completely fake. The correct form--disregard sub-versions but note punctuation and capitalization--is

AppleWebKit/537.51.1 (KHTML, like Gecko)

(I did a multi-file search in recent logs and the first hit was beyond-the-shadow-of-a-doubt human ... because it was me on the iPad. That's iOS7.)

Consider also

"Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25 (compatible; Googlebot-Mobile/2.1; +http://www.google.com/bot.html)"

Punctuation and capitalization are everything. I recently added a global UA block on
:: drumroll ::
GoogleBot
like that.

[dstiles]

Oops! Missed the capitalisation. Sorry, jbrohit.