I think for my own side projects i would require the user to login if they were making requests from those ip addresses or block.