Why are the IPs the relevant things? There are domains as well. And origin servers. Why not block the domain or the origin server, which wouldn't have collateral damage.