I am sorry to hear you are experiencing this so far
Unfortunately, we all have to deal with them from time to time and block either the whole AS number in the Firewall → Tools → IP Access Rules, or configure our Firewall Rules by a part of their user-agent, etc.
For example, in my case and my example I am blocking the three “Amazon” ASN numbers with Firewall → IP Access Rules as follows (in my post from below you can find a thread about “good” vs “bad ASNs” which you can freely block or challenge on your need:
I would suggest to do it using the Rate Limiting option as far as you can achieve this by using them. You can try it out and configure the needed by navigating to the Firewall → Tools → Rate Limiting.
If you get their IPs somewhere at the Firewall → Overview (events) tab at Cloudflare or at your log files at your origin host/server, kindly try to determine the AS number and block the whole AS number at Firewall → Tools → IP Access Rules.
with them from time to time and block either the whole AS number in the Firewall → Tools → IP Access Rules, or configure our Firewall Rules by a part of their user-agent, etc.
