My personal preference is to first make a small amount of effort finding something unique to the bots that can more often than not be dropped with a simple fire

My personal preference is to first make a small amount of effort finding something unique to the bots that can more often than not be dropped with a simple firewall rule or load balancer ACL. The botters almost always miss something.