I’ve noticed that a large proportion of spam showing up on my sites is coming from China, trying to promote chinese businesses. One annoying individual in particular likes to spam trac, by creating a username of “add” and spamming after logging in. In the past, I tried deleting the spam, removing the account, and then banning the IP address, but this moron just does it again from a new IP address. I’ve found that by editing the password file, and adding a “*LW*” to the hashed password, I can lock him out from future spamming, but this method is only effective till he uses a different username.