Maybe we can help you think the defence process?
As it was said, blocking individual IP addresses does not scale. An attacker can rotate source IPs, use botnets, or spin up more virtual machines.
I guess you already identified which resource is being overflood/exhausted.
We need to solve "Where ...