Support

No, you can't prevent the attacks from being served by your server. Simply put, this would require a time and action paradox: your server would need to evaluate whether an incoming request is legitimate or an attack before it reaches your server, i.e. this would require looking back in time without even consuming server resources.

That said, 200 to 300 attacks per day is super low volume. We get ten times as much and our server load is really low (about one twentieth of running at near-full capacity). Unless you get all attacks within a minute or two, you should first consider moving your site to a more reliable host or at least a decently performing server. If this doesn't help you might want to use a protection service such as CloudFlare in front of your site.

You can always change the parameters of automatic IP blocking. You could have a rule similar to 5 exceptions in 1 minute block the IP for 1 month. Some really fast and stubborn users (those who frantically hit refresh when they get blocked, in the irrational hope that something will magically change) will get locked out of your site and have to contact you, but it's probably an acceptable risk.

You're welcome!