Why do you block AWS?
Some people there will destroy your servers with insane spidering rates.
iptables conntrack helps but there are just too many and eventually the firewall takes more resources than the rest of the services you are providing
Do you deal with generic webpage crawlers that way, or targeted API abuse? Because the first ones can be smoothly shaved away with the help of Cloudflare, for instance.