I would also like to suggest enabling captcha by ASN number.
I'm mitigating an attack where the IP address is being changed, but it's from the same AS.
It would be interesting this way, it wouldn't block the IP address, but would only enforce the captcha.