If you have a mesh DNS with quick update intervals and swap around ips, then you can't block any of those ips, because you never know what are you blocking.

That that is just the tip of the iceberg...