I looked at some IP numbers hitting my web server and remembered that the firewall rules are all forgotten on a reboot. Lucky me I have a script with some of the IP ranges!
https://alexschroeder.ch/admin/ban-cidr
#ButlerianJihad

The reason I feel this is OK is that IP rangers are either residential (people) or corporate (hosting companies). I usually don't mind blocking companies.