Sorry, client-side was not in fact accurate: We check the incoming IP address against a list of blacklisted IP addresses stored for a site before upgrading the WebSocket connection