At various times in 2016 I had about 1/2 dozen solid human hits from the same 18.133.5.x IP (MIT) that looking at this now I can trace back to customers of mine. No activity from 18.133.0.0/16 since then until this IP requested the same html file using two different UA's yesterday:
18.133.125.157
Mojolicious (Perl)
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/72.0.3626.121 Safari/537.36
I know that MIT had the entire 18.0.0.0/8 at one time and that parts of it had been seemingly bought / transferred to Amazon over the last few years, and now it seems that Amazon has more of it now. Some IP lookup services and data bases are still attributing this IP to MIT.
I'm now going to be blocking 18.133/16 - I don't know for certain how much of 18/8 that MIT still owns.
And what's the story with Mojolicious?