Also take a close look at Stop That Hacker
http://www.stopthathacker.com
It's been around a long time and works great!
Most high speed proxie attacks use the faster HEAD request and Stop That Hacker stops 100% of all HEAD requests before Apache even reads the htpasswd file.
Hugs,
Danielle