How to record all IP addresses that are in Drop Iptables?

Question

Debian

On a Debian system, chains of iptables rules are running along with the geoip module.
There are a lot of different conditions where there is a DROP, how can I record all the IP addresses that are in the drop for further pickup and action?

Answer 1

you can first wrap it in -j LOG
and put -j DROP as the next rule in the chain

Answer 2

try the ipset module and its action... -j SET --add-set DROPped_list src