I see a link on blocking remote access Blocking Remote Login, which sets #ListenAddress in /etc/ssh/sshd_config.
But I would like to block a bunch of IPs, such as those listed in http://www.websworld.org/, if there a simple way to do this blocking without having to change setting frequently?
Moreover, is there a way to only allow remote login from specified IPs? (say, any login try from br, cn, in, etc domains would be blocked). I see some instructions on using fail2ban, but it seems such changes need to be done quite frequently, such as daily? (I may see it wrong, would appreciate any enlightenment.)