Good stuff here - found this post very informative and useful.
I'm going through the process of analyzing server logs and detecting spamming agents for the first time. One question I have for you is whether it would be possible to block spam to your servers using the user-agent string instead of the IP address. Like you mentioned, since the IP address may change, would it be more permanent to use a user-agent string? Or maybe this could be changed just as easily, making the point moot.
Great Post
Good stuff here - found this post very informative and useful.
I'm going through the process of analyzing server logs and detecting spamming agents for the first time. One question I have for you is whether it would be possible to block spam to your servers using the user-agent string instead of the IP address. Like you mentioned, since the IP address may change, would it be more permanent to use a user-agent string? Or maybe this could be changed just as easily, making the point moot.
Regardless, enjoyed this!