Just a thought, what about a dummy/honeypot path in robots.txt? If any request is made related to that path, block connections from that source?