Geoblock IPs from China

banhammer_china.sh

#!/bin/bash

#install this first
#apt-get install ipset

#add kernel module
modprobe -v ip_set
modprobe -v ip_set_hash_netport
#create list for IPs
ipset create geoblock hash:net

#Sorry China, too much attacks and spam from you, please be careful and responsive to abuses next time :(
for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/cn.zone)
do
  sudo ipset add geoblock $IP
done

#Think about adding more countries like ru,vn,ng
#https://en.wikipedia.org/wiki/ISO_3166-2

iptables -I INPUT -m set --set geoblock src -j DROP

Thanks, Michał

I added 2 more
jp.zone
ru.zone
I couldn't keep counting banned addresses on VESTA
what a time !!!