#!/bin/sh
# 2024-04-23 02:34:15 KI
IPTABLES=/usr/sbin/iptables
IPSET=/usr/sbin/ipset
$IPSET create BLOCKLIST hash:net

$IPSET add BLOCKLIST 103.25.140.0/22
$IPSET add BLOCKLIST 103.73.80.0/23
$IPSET add BLOCKLIST 103.250.0.0/22
$IPSET add BLOCKLIST 202.6.120.0/22
$IPSET add BLOCKLIST 202.58.248.0/22
$IPTABLES -A INPUT -m set --match-set BLOCKLIST src -j DROP
$IPTABLES -A OUTPUT -m set --match-set BLOCKLIST dst -j DROP