Just being pedantic but .0 is the network address and .255 the broadcast so you don't need to test these. On that note, if you need to block a whole range can the product not take a network address, so adding 136.169.192.0 would block the whole range? (Or something similar).