Unless you are 100% certain there won't be any false positives ever, then you should never try to do something that breaks the service. Rate-limiting the IP's

Unless you are 100% certain there won't be any false positives ever, then you should never try to do something that breaks the service. Rate-limiting the IP's as well as giving them a 5-second delay before handling the http requests should be very effective.