Step one in doing this is identifying which requests are coming from the same agent. Guess what fingerprinting helps with.