[superkuh]

So user-agent and whois to see if it's coming from a plausible netblock and accept: strings, http header stuff?