I see a great deal of spam (comment attempts, forum registration attempts, dictionary attacks, etc.) on my sites coming from the IP 127.0.0.1
I know that this is a local ip, so it doesn't make sense that it is coming through the in the user IP server variables.
Would it make sense to block all traffic with that address, or would I be blocking legit users by doing so?
Also, is it better to RESPOND to blocked requestors with a 403, or just serve them nothing/an empty page (in this case I define "better" as the method that reduces the likelihood of that blocked requestor from making additional requests).