ban ip segments without much test