You're not fighting unsophisticated attackers. 50% of them are, maybe. The rest? They're actively hostile, detecting blocking attempts, moving on to botnets, DDoSing you and trying everything they can to bypass you.

People have been sent to jail for participating in LOIC attacks which were less destructive that what these bots do on the daily.