I'm not talking about keeping logs, I mean purporting to be a network
peer in order to gain a connection slot and then not behaving as one
(not relaying transactions)

That definition would include all SPV clients?

I get what you are trying to do. It just seems extremely tricky.