What is your site’s URL? If it’s on a custom domain you can use Cloudflare and activate “I’m under attack” mode. That will cause it to pose a challenge to every visitor, which includes more sophisticated bot-blocking (though nothing is completely foolproof).