Ignoring the narrative portion , I routinely block the PQ IP spaces which change frequently in my services. They are mass brute force and exploit attempt-abuse report is ignored, spam/exploit scan, botnet CNC

They are also UpStream of several other provider. For example https://bgp.he.net/AS215540#_prefixes

I have not seen legitimate single request from ANY ip in this. Only spam bot and brute.

And you never would - if you keep slapping IP bans left and right.

Blanket IP bans should have died back in 00s, where they belong. Instead, we still get wannabe webmasters applying them willy-nilly - with gatekeepers like Cloudflare enabling them.