@robert976 So what I did does involve some technical know-how. Regarding what JorgeV mentioned, I can see why a lot of people don't block suspicious IP's, and that is the technical challenge that is imposed.
Basically, it comes down to analyzing the IP's that connect to your site. You can use your log files, but what I did was log IP's to a text file that were connecting to my site. I then use a service (15 bucks a month) as an API to resolve the ASN+ISP from individual IP addresses. From there, I go through them, and manually block ISP's that are datacenters/proxies (eg. proxy ISP would be something like: xxVPN, and datacenter/VPS would be something like: softlayer).
A free way to resolve IP's to their ISP and ASN, is to just copy and paste IP's to a website that can do it for you. That's what I did at first, and it works the same way. So i would copy and paste IPs here: ht
tps://www.infobyip.com/ipbulklookup.php and then look for anything suspicious, then block the ASN. would do that regularly as part of my daily routine.
I use Cloudflare to block ASN IP blocks. In the firewall custom rules, you can set rules to block based on ASN IP blocks that try to connect to your site.
Others may have a different way to tackle this problem, but this is what I did and it worked for me.
[edited by: not2easy at 3:48 pm (utc) on Aug 4, 2020]
[edit reason] No links to tool sites - see Charter [/edit]