#!/bin/bash

#install this first
#apt-get install ipset

#add kernel module
modprobe -v ip_set
modprobe -v ip_set_hash_netport
#create list for IPs
ipset create geoblock hash:net

#Sorry China, too much attacks and spam from you, please be careful and responsive to abuses next time :(
for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/cn.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/us.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/se.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/br.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/de.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/fr.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/in.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/id.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/ca.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/gb.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/ir.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/bd.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/ar.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/tr.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/it.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/ru.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/fi.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/ua.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/es.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/cz.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/iq.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/za.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/mx.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/bg.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/co.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/bo.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/th.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/vn.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/kh.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/au.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/pk.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/sg.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/pe.zone)
do
  sudo ipset add geoblock $IP
done

for IP in $(wget -O - http://ipdeny.com/ipblocks/data/countries/rs.zone)
do
  sudo ipset add geoblock $IP
done

#Think about adding more countries like ru,vn,ng
#https://en.wikipedia.org/wiki/ISO_3166-2

iptables -I INPUT -m set --set geoblock src -j DROP