I try to focus on IP's, that send traffic (hits) every x minutes. These are sometimes hard to find. But it's worth it. I look at regular visitors. For instance: if some IP address visits every, say 10 minutes, during 6 hours, for sure something's wrong!
lookgoodies