They can be tracked back one by one but if you have any amount of traffic it’s a constant game of cat and mouse.

You can block entire ASNs until they start using residential proxies provided by less ethical companies. Then you end up blocking all of France or destroying user experience by enforcing a captcha on everyone.