Seen last month and this. This UA amounts to a Denial of Service when it hits multiple IPs at once (as it did to the web IPs in our CIDR) simultaneously. I've seen it go by both --

Jorgee
Mozilla/5.0 Jorgee

-- and it hits 85 OR 102 known exploits -- example dirs: admin, db, php, sql, mysql -- in one swell foop. Plus it inserts your IP address IN every URI:

//[IP-address-here]:80/1phpmyadmin/

(That initial // is part of every URI.)

Have seen it three times from two sources, Austria (a1.net) and Italy (vdsti.it). Jorgee may also be connected to the even more obnoxious hits that begin with --

/Ringing.at.your.dorbell!

-- and include the Google REF:

http://google.com/search?q=2+guys+1+horse

For more observations, including an 85-URI set and Rewrite examples, see: [skepticism.us...]