@cR0w@infosec.exchange FWIW AWS WAF does let you do this. Used it to great effect to block most VPS providers.