#!/bin/sh
# 2024-04-23 02:39:51 TN
IPTABLES=/usr/sbin/iptables
IPSET=/usr/sbin/ipset
$IPSET create BLOCKLIST hash:net

$IPSET add BLOCKLIST 41.224.0.0/13
$IPSET add BLOCKLIST 102.104.0.0/13
$IPSET add BLOCKLIST 102.128.0.0/18
$IPSET add BLOCKLIST 102.141.204.0/22
$IPSET add BLOCKLIST 102.152.0.0/13
$IPSET add BLOCKLIST 102.164.112.0/23
$IPSET add BLOCKLIST 102.168.0.0/13
$IPSET add BLOCKLIST 102.240.0.0/14
$IPSET add BLOCKLIST 154.72.224.0/20
$IPSET add BLOCKLIST 154.104.0.0/13
$IPSET add BLOCKLIST 160.156.0.0/14
$IPSET add BLOCKLIST 164.160.0.0/22
$IPSET add BLOCKLIST 165.50.0.0/15
$IPSET add BLOCKLIST 169.255.68.0/22
$IPSET add BLOCKLIST 169.255.92.0/22
$IPSET add BLOCKLIST 192.68.138.0/24
$IPSET add BLOCKLIST 193.95.0.0/17
$IPSET add BLOCKLIST 196.41.95.0/24
$IPSET add BLOCKLIST 196.61.0.0/21
$IPSET add BLOCKLIST 196.176.0.0/14
$IPSET add BLOCKLIST 196.184.0.0/14
$IPSET add BLOCKLIST 196.203.0.0/16
$IPSET add BLOCKLIST 196.216.156.0/22
$IPSET add BLOCKLIST 196.224.0.0/12
$IPSET add BLOCKLIST 197.0.0.0/11
$IPSET add BLOCKLIST 213.150.160.0/19
$IPTABLES -A INPUT -m set --match-set BLOCKLIST src -j DROP
$IPTABLES -A OUTPUT -m set --match-set BLOCKLIST dst -j DROP