Is the IPv4 address inside 5.9.0.0/16 (Hetzner)? Pure bit-mask check, no network call, returning inside true/false with the range's first/last address and size. Precise allow/deny rules for a well-known block. $0.01 per check.