can now block subnets to avoid whack-a-mole