I've simply blocked whole ASNs for Meta, Google, AWS, etc.