@AbramS,
I have just noticed this script, which seems to be sufficient in many ways.
Nevertheless, it is more convenient to load the DROP list into a custom Nginx conf with the format
deny [ IP1 ];
deny [ IP2 ];
...
deny [ IPn ];
and refresh the Nginx conf on a frequent basis, preferably...