What about those behind a firewall? Say at a college. They would all be from a single IP address, but possibly multiple user agents. I don't know how many ISPs would do that, but it is a possibility. Do you handle cases like that or do you just leave that as a margin of error?