1. Spoofed user‑agents & bot traffic from VPS/proxies
“Many of those user‑agents listed are often faked. Look up which ASN owns their IP. If I block most VPS providers most of the faked bots vanish…” — Bender
“Yeah, that's exactly what these visits are: faked user agents that fail IP verification or Web Bot Auth. What's interesting is the surge across so many websites in the last week.” — gavinhking
2. Unreliable geolocation & attribution
“From a technical perspective, all this “china/russia” attribution is built on a quite shaky foundation.” — bflesch
“Problem here is there are not single fibers attaching (most) countries, but a bunch of them. If you control both the ingress and egress for some particular users it's possible, but if you don't then your probing packing may end up back in China with a lot of evidence of backscatter.” — pixl97
3. Practical blocking approaches & community tools
“You can block entire ASNs. If you are frustrated with bots, blocking Tencent's entire IP address space would have very few downsides.” — reincoder
“Blocklist download and configuration: https://knock-knock.net/blocklist” — djkurlander
These three themes capture the prevailing concerns: the prevalence of fake bot traffic, the fragility of country‑level attribution, and the range of community‑driven methods for detecting and blocking unwanted requests.