If I see persistent attacks from an IP I'll step in and blacklist the host proactively by setting up an evergreen iptables rule. It's incredibly rare but it happens once in a blue moon.