4 ms·
> Google and my employer deal with massive amounts of spam emails and gets it right 99.9999999% of the time. Emails are literal treasure troves of data and are
by judge2020 5y ago
> Google and my employer deal with massive amounts of spam emails and gets it right 99.9999999% of the time.
Emails are literal treasure troves of data and are easy to pull signals out of for determining spamminess. HTTP GET requests, on the other hand, aren't - and there's no way to associate them with other spam-connected properties (like you can with click-through domains in emails) besides by blocking entire IP ranges for the ASN not moderating their customer base.
- Scoundreller 5y agoPretty sure my IP+browser pairing hasn't changed in months. They know who I am.
- throwawayboise 5y agoI mean it's pretty easy. If you are seeing GET request in your logs for PHPadmin or Drupal URLs and you're not running those on your server, it's pretty clear they are up to no good and you can block that IP address.
- MinorTom 5y agoThat doesn't work well with CGNAT or VPNs/Tor. That's why the latter is captcha'd more often.