Would it not be more effective just to require payment for accessing your website? Then you don't need to care about bot or not.