[BadBadJellyBean]

I assume for aggressive blocking the only prefix size will change. What is a /32 for IPv4 might become a /64 or smaller for IPv6.

[hdgvhicv]

Larger. A /56 and get multiple hits from nearby /56s and you block the /48.