iCab/5.8.4

[TorontoBoy]

UA: iCab/5.8.4 (Macintosh; U; Intel Mac OS X)
Protocol: HTTP/1.1
Robots.txt: No
Host: Charter Communications
75.176.0.0 - 75.191.255.255 75.176.0.0/12
75.183.32.13*

Looks like a human, browsed like a human, but a UA search came up empty. Is this a Mac thing?

75.183.32.13* [03/Jan/2019:16:09:46 GET /example/2017/01/23/2016-honda-fit-oil-change/ HTTP/1.1 200 53203 - iCab/5.8.4 (Macintosh; U; Intel Mac OS X)

Request Headers:
2019-01-03:21:09:46
URL: /example/2017/01/23/2016-honda-fit-oil-change-splash-shield/
IP: 75.183.32.13*
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-us
Connection: keep-alive
Host: example.com
User-Agent: iCab/5.8.4 (Macintosh; U; Intel Mac OS X)

[lucy24]

I think it's an obscure Mac browser. I've seen it very, very rarely but do recognize the name. The minimalist Accept-Language suggests a mobile of some sort, but looks like a desktop?

:: detour to headers ::

2018-02-16:05:58:32
URL: /
IP: 69.249.151.224
Accept-Encoding: gzip, deflate
Content-Length: 0
Accept-Language: en-us
User-Agent: iCab/5.8.3 CFNetwork/760.6.3 Darwin/15.6.0 (x86_64)
Accept: */*

. . . and that's the only request in the past year. IP is Comcast, which could be anything.

:: cross-check of raw logs ::

Huh. I didn't realize headers even got logged on a HEAD request. File under: Today I Learned...

:: deeper search, because now I'm curious ::

Maybe they've stopped supporting it? Requests peak in 2015-16.

Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_4_11; en) AppleWebKit/533.17.8 (KHTML, like Gecko) iCab/4.8 Safari/533.16
(repeated blocked requests from Verizon IP, where the repeated requests look more like stupidity than malice)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_4_11; en) AppleWebKit/533.17.8 (KHTML, like Gecko) iCab/4.8 Safari/533.16
(from a similar Verizon IP, months after the other one, but possibly the same person)

Mozilla/5.0 (compatible; iCab 3.0.5; Macintosh; U; PPC Mac OS)
(Time Warner IP)

Those are the only human requests I can find. There are also a fair number of robots, including the ones that put /j+ at the end of the URL. (Can't now remember what this meant, but I think there was once a discussion hereabouts.)