But once you’ve got them that’s the end of it they’re unlikely to change their IP addresses.

My point is it’s not like you need to be public facing, whether it would be literally millions of IP addresses that would be valid amongst a few dozen that are invalid.