I have rate limits on my self-hosted site. A script monitors logs and will spot patterns of usage that resemble scraping, banning the IP address for a temporary

I have rate limits on my self-hosted site. A script monitors logs and will spot patterns of usage that resemble scraping, banning the IP address for a temporary period. It's tricky. If a botnet is doing the scraping, the requests will come from different addresses, each of those doing things at a reasonably slow rate as to not alert suspicion.