There are trade offs with everything, the more you block, the more innocent people you will block that come from Amazon/etc ASNs due to company VPNs and such
imo the way Google and other big websites deal with attacks and such (at least against static assets/non-abusable things like loading home pages) is the best, just absorbing them with capacity rather then trying to play a game of whack a mole. Cloudflare makes this possible pretty easily with caching, rate limiting rules and such, and then for bigger abusers you can serve challenges based on IP Rep and stricter rate limits on specific endpoints, accepting the fact that some bots/etc will always get through, make it a bit harder, but not hard enough to potentially give any real users too much of a hassle
i get that, but my opinion to add to that is that if Amazon has a bunch of fraudulent actors on their system, they could be doing alot more to remove them and report them to the FBI
Then in another request: nginx.access.log.1:198.235.24.174 - - [14/Oct/2023:06:13:10 +0000] "GET / HTTP/1.1" 301 0 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com"