I have two types or resources for IPtables blacklists within HestiaCP.
root@host: cd /usr/local/hestia/data/firewall/ipset/
- asn-personal-blacklist.sh
1a. Read here how to configure local blacklists: Configure Local Blacklists
https://raw.githubusercontent.com/chriscapisce/iptables-personal-blacklists/main/single-ips-personal-blacklist.txt