There's a notion: block access only from geo-IPs in D.C. and Hollywood. (I'm not really suggesting this, but it amuses me, and we do need to take the offensive in some way more practical than that, not just keep reacting.)