implement host IP blacklist, fixes #162