I use fail2ban with a tweak to ban whole network segment, as per IP ownership lookup. It is really obligatory tweak on sites which support IPv6 (and mine does).
The Register 
Biting the hand that feeds IT
About Us
Our Websites
Copyright. All rights reserved © 1998–2024
