LoadModule geoip_module modules/mod_geoip.so    
LoadModule security2_module modules/mod_security2.so
GeoIPEnable On
GeoIPDBFile /usr/tmp/GeoLiteCity.dat
SecRuleEngine On
SecGeoLookupDb /usr/tmp/GeoLiteCity.dat
SecRule REMOTE_ADDR "@geoLookup" "chain,drop,msg:'Verbindungsversuch aus .CN!'"
SecRule GEO:COUNTRY_CODE "@streq CN" "t:none"