ipset destroy blacklist 
ipset create blacklist hash:ip

iptables -F INPUT
iptables -I INPUT 1 -m set --match-set blacklist src -j DROP

lastb | head -20|awk '{print $3}'|sort -u|xargs -n 1 ipset add blacklist