@digitalocean @jonschwenn I resorted to mod_security, which allows me to start dropping packets from an IP after a number of failed attempts