I don't know how to feel about this.
Any production app should already use a reverse-proxy (e.g. NGinx or Varnish), and blocking and similar logic can already be done there. I think that the problem does not warrant its own solution at this level.