IP Firewall only allows /16 and /24 CIDR blocks

It’s possible to block custom IP ranges via CF workers:

https://tech.mybuilder.com/determining-if-an-ipv4-address-is-within-a-cidr-range-in-javascript/

One of these could easily be used in a CF worker script that 403’s if the IP is from AWS.