2ip bot

[Pfui]

Full UA: 2ip bot/1.1 (+http://2ip.io)
robots.txt: No

Not much info about this one. From a German IP. Hit root 3 times in 12 seconds. Address in UA appears to offer misc. doodads 'for your site'; quick skim didn't show this one (the name of which looks like 'Zip bot' if you need stronger readers:)

[lucy24]

:: obligatory run to raw logs ::

Oh, there it is, across all sites, always sets of three requests for root in rapid succession, all to http, all with a lovely 403 and/or 429. Out of sight, out of mind.

:: further run to logged headers ::

Four distinct header anomalies, hurrah, including bad_range. (I sometimes use this instead of “Require ip” to allow for legitimate robots using Usual Suspects ranges.) All requests, regardless of site, are to example.com without leading www.