I have asked our network team to explore options for unblocking ASNs. NordVPN, for instance, uses multiple colocation facilities such as DigitalOcean, Datacamp, etc. where we've seen attacks, crawls, etc.
originating from.

If they open up all of those ASNs (networks) for those cloud providers, FT won't stay up for long. Still, I've asked them to se if there's a way we can be a little more delicate and discerning in what gets blocked and what doesn't