Hacker News Reader

There are some ASN-based DROP list collections on GitHub if that would help.

Oh! That didn't even occur to me. Yeah, I could pump that into ipset. Got one in particular that you think is reliable?

I think Spamhaus runs the big one.