@Hex oh boy, this explains exactly what I see on our network at work.

Millions of IP addresses from global residential networks making exactly 1 request. With a human-looking, but old user agent header.

We had to implement a JavaScript cookie challenge for all users, which is sad but works.