The IP security blacklist is stored at /etc/config/ipsec_deny.conf

Editing this is effective immediately.