|
Mike, it's not normal proxies, as people think of proxies.
If you start tracking your attacks, use geoip lookup on the ip's and reverse lookup, you will start to see many of the IP's are from hosting companies. The Webmaster has say 20 IP's, and he will rotate through them, like a proxy. You just have to be careful that it isn't also a dial up ISP.
A quick lookup of the hosting company name + spam on google, will let ya know if it's legit or not. From here you can block the entire hosting company, which will lower your overall brute force attacks.
Just make sure you put a notice up that actually tells the people they have been blocked, and if it's an error give them a clean way to contact you so you can unblock the ip.
|