Re:blacklist the netblocks? (Score 3, Informative)

Sure, right out of my pf.conf:

# All China netblocks [ http://www.apnic.net/apnic-bin/ipv4-by-country.pl? country=cn }

table <china> { 61.28.0.0/15, 61.48.0.0/13, 61.128.0.0/10, 61.232.0.0/13, 202.0.110.0/24, 202.0.160.0/20, 202.0.176.0/22, 202.4.128.0/19, 202.4.252.0/22, 202.14.88.0/24, 202.14.235.0/24, 202.14.236.0/23, 202.14.238.0/24, 202.20.120.0/24, 202.22.248.0/21, 202.38.0.0/20, 202.38.32.0/19, 202.38.64.0/18, 202.38.128.0/17, 202.90.0.0/22, 202.90.252.0/22, 202.91.0.0/22, 202.91.128.0/22, 202.92.0.0/22, 202.92.252.0/22, 202.93.0.0/22, 202.93.252.0/22, 202.94.0.0/19, 202.95.0.0/19, 202.95.252.0/22, 202.96.0.0/12, 202.112.0.0/13, 202.120.0.0/15, 202.122.0.0/19, 202.122.32.0/21, 202.122.128.0/24, 202.127.0.0/18, 202.127.128.0/17, 202.130.0.0/19, 202.130.224.0/19, 202.131.160.0/19, 202.131.192.0/19, 202.136.252.0/22, 202.192.0.0/12, 203.81.16.0/20, 203.87.224.0/19, 203.88.0.0/18, 203.89.0.0/18, 203.90.0.0/18, 203.91.0.0/18, 203.92.0.0/18, 203.93.0.0/16, 203.94.0.0/18, 203.95.0.0/18, 203.128.128.0/19, 203.184.0.0/19, 203.192.0.0/19, 203.196.0.0/18, 203.207.64.0/18, 203.207.128.0/17, 203.208.0.0/18, 203.212.0.0/18, 203.222.192.0/18, 203.223.0.0/20, 210.5.0.0/16, 210.12.0.0/15, 210.14.128.0/17, 210.15.0.0/17, 210.15.128.0/18, 210.21.0.0/16, 210.22.0.0/16, 210.25.0.0/16, 210.26.0.0/15, 210.28.0.0/14, 210.32.0.0/12, 210.51.0.0/16, 210.52.0.0/15, 210.72.0.0/14, 210.76.0.0/15, 210.78.0.0/16, 210.79.224.0/19, 210.82.0.0/15, 211.64.0.0/13, 211.80.0.0/12, 211.96.0.0/13, 211.136.0.0/13, 211.144.0.0/12, 211.160.0.0/13 }

You would be amazed how many hits I get from this rule alone.