@pasjrwoctx👽 Thanks, I checked the user agents. The pattern looks highly coordinated.

Out of 164,435 Anubis challenge requests, there were only 160 distinct user-agent strings. The top ten account for 96.79% of all requests and were used almost perfectly evenly:

  • Firefox 120 / Windows — 16,066
  • Chrome 118 / Windows — 16,052
  • Firefox 121 / macOS — 15,949
  • Edge 119 / Windows — 15,917
  • Chrome 119 / Windows — 15,874
  • Chrome 119 / macOS — 15,872
  • Edge 120 / Windows — 15,863
  • Chrome 120 / macOS — 15,853
  • Firefox 121 / Windows — 15,812
  • Chrome 120 / Windows — 15,761

These are old browser versions from around 2023. Combined with almost one IP per request, this looks like a single coordinated tool rotating through a fixed list of spoofed browser identities and a very large residential/proxy network. It does not prove whether the objective is scraping or disruption, but it is clearly not ordinary independent crawling.