Had another one trying to send formmail today. It did four GETs at one second intervals. Nothing unusual there, I guess. The agent was "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)". I figure that's probably faked. And, the IP changed for each one: