Simple answer.
Just block their entire IP ranges from accessing your systems as you encounter them. Same tactic as used for anti-spam efforts. It won't get rid of the problem entirely, but it will stuff them into their own little Balkan State, where they can play with themselves until the bubble busts.
Seems to be working for me & mine ... and the piece and quiet is quite pleasant.