For those not at cloudflare level and don't want to reinvent the wheel, try IPSET instead of iptables http://daemonkeeper.net/781/mass-blocking-ip-addresses-wi

For those not at cloudflare level and don't want to reinvent the wheel, try IPSET instead of iptables http://daemonkeeper.net/781/mass-blocking-ip-addresses-with-ipset/ http://daemonkeeper.net/781/mass-blocking-ip-addresses-with-... TLDR: http://daemonkeeper.net/wp-content/uploads/2012/05/ipset4.png http://daemonkeeper.net/wp-content/uploads/2012/05/ipset4.pn...