http://recchiaa3blv62iesz7qqrqabp4o3c3pv557cjz6r5vdarudusoiozqd.onion/server/fail2ban.shtml
I'm not keen on going to China and Russia, so those get cut, too. That's a lot, so a quick google serch turns up CountryIPBlocks.net , which makes the whole process a 15 second point and click choose your own adventure. Finally, we just need to tell iptables to check the list before moving on.