> That's very computationally inefficient.

It's O(1) with iptables/nftables ipsets. Moreover as I blocklist entire CIDR blocks, there aren't that many entries in those ipsets.

You can trivially maintain a list of the size of the whole ipv4 space by using bitmaps