This script will block the specific countries you've asked of it to block. #!/bin/sh #Block specific countries from hitting your server (CentOS) #Install ipset if you dont have it yum install ipset -y #Countries to block #china, france, germany, russian federation, united arab emirates #Create the initial rules in ipset based on hast:net for a in {china,france,germany,russia,uae,canada,australia}; do ipset -N $a hash:net; done #Download the necessary files from ipdeny wget -P . http://www.ipdeny.com/ipblocks/data/countries/cn.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/fr.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/de.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/ru.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/ae.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/ca.zone wget -P . http://www.ipdeny.com/ipblocks/data/countries/au.zone #Add each IP address from the downloaded list in