Every now and then these peers connect to my node with 3 connections each. They don't take up much bandwidth but they hold the connections open for a long time.

They claim to be SPV clients. Are they valid peers and why do they need 3 connections?
Is there an easy way to ban multiple connections from the same IP, without say, doing something drastic like blacklisting AWS IP addresses.