Thanks Mark, blocking out the range in htaccess would be a lot faster than customizing the script. Don't know why I didn't think of that. Maybe because I was just thinking of the satisfaction of having them think their attempt was going to work only to be denied when they got to the page.

I think I'm going to give it a few weeks to see if I get any mroe hits after blocking out that one new additional IP. A company in Russia own the whole from 81.177.14.x - 81.177.15.255 - I'm sure they're a hosting company so I don't want to block out everything right now. It may be only a couple that are being misused.