A lot of compromised home devices and cheap servers proxying traffic, from all over the world.

If that is the case how can you determine the reason for the activity?

Some fake user agent, some tell you who they are. Or.. do they?

Here-in is the problem. And if you block them, you risk blocking actual customers.