Should have wrapped it in php tags
This is one example of one use agent thats been modified
PHP Code:
Mozilla/4.0 (compatible;)
Use the tracking system and see how many user agents use it.
They think by taking out some information, you wont catch on and ban them
One use agent that had a bad habit of trying to inject base64 when I used the other blocking system was this one
libwww-perl
Another that only ever hits from ips on honeypot is this
w3m/
The good thing about this mod, you can track and then decide if its worth banning
Older user agents are worth watching as well. Firefox is an easy one to watch.
Firefox gives you the date the version came out
This example
PHP Code:
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22
If you look at the Geko/ part. It gives the date the version of firefox was released
I ban Firefox/1 and Firefox/2
Opera dont have many use it. I personally love the browser, but its another browser that auto updates. You can catch a lot of low life that way
Present version of Opera is Version/11.51