Odd set of 4 UA's seen today

Some sort of probe or test I assume

[SumGuy]

Today I get these 4 hits to my landing page (index.html) from the same Amazon AWS IP (51.20.91.221). The hits came spaced about a minute or two apart, the user-agent changed as follows:

Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 NokiaE90-1/07.24.0.3; Profile/MIDP-2.0 Configuration/CLDC-1.1 ) AppleWebKit/413 (KHTML, like Gecko) Safari/413 UP.Link/6.2.3.18.0

Mozilla/5.0 (Linux; U; Android 4.1; en-us; sdk Build/MR1) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.1 Safari/534.30

Mozilla/1.22 (compatible; MSIE 5.01; PalmOS 3.0) EudoraWeb 2.1

Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1


Anyone care to speculate why someone is testing those particular odd-ball (or ancient?) user-agents ?

I have no previous history for either www or smtp hits from 51.20.0.0/16, so in goes that CIDR into my router's drop-and-don't-log IP list. AWS continues to prove itself as a playground for malicious web activity

[lucy24]

Eudora? Wasn't that a widely used email program a few centuries, oops, decades ago?

Firefox TEN? Hahahahaha.

Safari 4.1 on Android 4.1? I would not have been surprised to learn this is a wholly imaginary UA. On deeper delving through logs, the only recent hits I find for

 200 .+?Android.+?Version/[\d.]+ Safari

are Kindles. (Gosh. I did have a vague idea the Kindle can go online, but can't remember ever noticing one.) For non-Kindles we're looking at 2019 and earlier.

Looking up the string “SymbianOS” in current logs (this calendar year) I find that, (a) most come from what can loosely be called The Usual Suspects, and (b) most got a 429 rather than a 403. This does strongly point to malign robotic activity. The last apparent human I find is from early 2018--i.e. more than five years ago--and even then the string was much more popular with robots.