Like I've been reporting, they're all going stealth.
I keep seeing user agent change from this:
220.127.116.11 "Java/1.4.1_04"To this:
18.104.22.168 "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"Soon the usual blocking methods won't work whatsoever.
Wake up and smell the COPY before it's too late!