On Thu, 8 Jan 2015 22:53:45 +0200 Danny <mynixmail@gmail.com> wrote: > > As you can see ... I am already DROPping some of these IP's ... I > just need something to block an ENTIRE country ... > Why? If you don't know anyone in China, don't pick up the phone. Why are your services responding to them? You're not seriously telling us you're accepting user name and password for ssh authentication from the Internet, are you? -- Joe