We've seen some issues with AZ again today. On investigating it looks like more DDOS/abuse traffic from overseas. I've applied the same sort of block as last time we saw this, and things appear to have returned to normal..
The sharp drop is when the "attack" started, the jump is when it was blocked... the red line is blocked requests.
Could be a scraper? But it doesn't sound much like one if the user agent wasn't clear, or suspicious. A DoS attack would probably be making an odd request, intended to waste the most resources possible.