Manually add or remove IP address from IP Intelligence blacklist category

Old question, im aware, but if someone turns up here it is good to know there is now a tmsh command for this:

IP-Intelligence and IP-Shunning | DevCentral

example:

$ tmsh run security ip-intelligence category name denial_of_service ip-ttl add { 123.123.123.123,300 }