That is why my webserver only server-negotiate Cha-Cha/Poly at TLS level and rejects all else.

No caddy. No cache. No proxy.

A lot of scrapers give up.

Log rate remains low. Actual visits even lower.

Peace of mind, for a while:

https://egbert.net/blog/articles/index.html