Oh! That didn't even occur to me. Yeah, I could pump that into ipset. Got one in particular that you think is reliable?

I think Spamhaus runs the big one.