[mtekman]

I used to run fail2ban, but I found it (or at least its defaults) ineffective against discouraging further requests. With iptables, you can specify the connection to hang for a period and then drop

[justsomehnguy]

Defaults are set to reject. Just configure the jails or a global config.