@sammy @welshpixie @j2@tech.lgbt they don't federate as fedisearch.io though they do have search results for my instance.. they also note
> Our servers always identify themselves with a meaningful "User-Agent" HTTP request header.

but I don't see anything that would meaningfully identify them in my logs. Definitely seems like a bad actor (or very naive??)