ipset

Manage kernel-level IP / port sets used by iptables.

$ sudo ipset create blacklist hash:ip
$ sudo ipset add blacklist 203.0.113.5
$ sudo iptables -I INPUT -m set --match-set blacklist src -j DROP
$ ipset list blacklist