Scraper attacks originate from numerous sources, often involving millions of unique IP addresses making multiple requests in a short period. The user-agent field in these requests is typically manipulated to appear as legitimate browser traffic.