I wanted to know if there is any place where people have shared these IPs which needs to be blocked I feel most of the time the entries must be common though not always.So if hosts.deny file is shared some where then give a link.(I do use auth.log to note IPs to block)