On: Some idiot is using your tool to mass scan our network

[ivanche]

TIL that masscan is actually a legitimate tool! It's one of the first user-agent strings I block on every new nginx installation.

[mike_d → ivanche]

People who don't change the default user agent are legitimate security researchers. People with actual malicious intent change it to whatever the current Chrome UA is.