We ended up writing similar rules to the article. It was just based on frequency. While we were rate limiting bots based on UA, we ended up also having to appl

We ended up writing similar rules to the article. It was just based on frequency. While we were rate limiting bots based on UA, we ended up also having to apply wider rules because traffic started spiking from other places. I can't say if it's the traffic shifting, but there's definitely a big amount of automated traffic not identifying itself properly. If you look at all your web properties, look at historic traffic to calculate <hits per IP> in <time period>. Then look at the new data and see how it's shifting. You should be able to identify the real traffic and the automated very quickly.