Originally Posted by raymor

Doing lookups on each IP that hits your server could get VERY expensive in
terms of resource usage. Instead I would look at the actual IP ranges that
seem to be problem and block them in iptables.