[brianwawok]

If they are on AWS or similar, their IP range may be <all of AWS>, at which point your firewall is not doing much walling.