I took a quick look at the IP data you just released. Extracted IPs then unique-sorted them and took a few random samples. Everything was Eastern Europe, Russia

I took a quick look at the IP data you just released. Extracted IPs then unique-sorted them and took a few random samples. Everything was Eastern Europe, Russia, or Nigeria. There are some broadband IPs and some pppoe (!) IPs in there too, which might explain why it's not a very heavy attack. There are 500+ IPs listed. I've permabanned a few million IPs on my servers, and I bet there's some overlap. Gimme a sec to see if I can put together a quick script for you.