3 ms·

So user-agent and whois to see if it's coming from a plausible netblock and accept: strings, http header stuff?