I said:
After about another hundred IP addresses were banned
between midnight
and 1am, eighty more in the following hour, and another sixty after
that... I gave up and went down the Apache authorisation route on the
basis that the sooner in the process that they're stopped, the better.
Another two hundred and sixty banned in the hour after lunch (which
translates as over 1,300 naughty attempts to login), but Apache seems to
have coped OK.
Ian