Hacker bots are continuously poking my sites looking for vulnerabilities:

For an additional layer of protection I'm constantly adding offending addresses into a hosting-wide block list:
deny from 196.251.72.213
If a subnet xxx.yyy.*.* is encountered more than three times, I'm blocking it entirely: