@natalie @Moon @Drand @teknomunk Oh yeah he's found my instance. Nowhere near as rapidly though (about 6/s currently), and the only time he used that UA was on my gitea (I think?):
/var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:31 +1100] "GET /Zergling_man/clemmy/ HTTP/1.1" 200 47853 "-" "Python-urllib/3.9"
/var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:32 +1100] "GET /Zergling_man/clemmy/</a> HTTP/1.1" 404 11 "-" "Python-urllib/3.9"
/var/log/nginx/access.log:18.4.38.176 - - [05/Dec/2023:18:36:32 +1100] "GET /Zergling_man/clemmy/%3C/a%3E HTTP/1.1" 404 9520 "-" "unshortenit 0.4.0"

Has gitea released its AP stuff yet?