IP based blocking is complicated once you are big enough

It’s literally as simple as importing an ipset into iptables and refreshing it from time to time. There is even predefined tools for that.