@evey @domi Well from a DDoS perspective, you typically already end up blocking whole subnets if not ASNs even in IPv4 era anyway.
Like you really need to end up with broken tools (and of course there's a lot of those) to only have blocks be per-IP.