>For as long as the Internet exists, there will always be good and bad people targeting at that. I always assumed there are some who can infiltrate anywhere they want. For most of them, they are on the good site. They usually work with major entities putting their network at a more secured level. But, as you said, there is just so much, sometimes, we can do.

Well, you're part of the way there in that you've identified IPs that are definitely "bots". The trouble is making that identification process generic and reliable. Bots are like art - it's hard to describe exactly what they are, but you know them when you see them.

And sometimes the IP by itself is not enough. You might have a customer with 200 users behind a firewall and a single IP. If one of those users gets infected, the bot attacks will come from that same IP. What happens in that case?