I had the same issues when running just pennywise. I now use proxypass as well, it has stopped all the brute force proxy attacks cold.
http://www.proxypass.com/
I run both pennywise and proxypass because I like the reporting functions for member access with pennywise, they recommend not to it because of server load concerns but I've not had any problem have both running so far.