

What are you trying to block?
I’m asking because based on the traffic I saw on a live retail website had malicious access attempts coming from significantly more addresses than you seem to be indicating and more often than not the address was different for each request.
That said, Meta DDoS bots were outright blocked because they hit the same URL thousands of times for no apparent reason.
Note that this was during the first half of this year, the landscape has undoubtedly worsened since then.








We told you so …
https://www.techdirt.com/2026/02/25/hackers-expose-the-massive-surveillance-stack-hiding-inside-your-age-verification-check/