Yeah. ip-set rules are great for ensuring across-boot persistence, too.
One of these days, I'll get around to integrating my deployment-configuration with a "phone home" hook that informs the configuration service, "when re-provisioning this host or provisioning new hosts, blacklist these IPs".
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.