I get a toggle-flipper scraper that uses a random agent string (Win95!), and comes in from a whole pile of IP addresses. (I should check if it’s using TOR.) It gives itself away by always trying port 80 first, HTTP/1.1…
I plan to spend some time analyzing it, but that’ll have to wait for the other side of moving day in a month.
