How to kill bots on the site?

Question

PHP

Good afternoon.
In general, there is a site on which someone very badly pours black traffic,
bots that make the algorithm of actions went to the main page, clicked on the product, left.
We put the site on cloudflare, the captcha partially cuts off, and even then not all of them!!! But even if it worked, how to live with captcha for ordinary users?
Data about them.
1. IPs practically do not repeat
2. Human user agent
3. More during the day, less at night.
4. cloudflare does not take (only with captcha)

Answer 1

Bots are very easy to kill.
Any simple test that only humans can pass is needed. This is not necessarily a captcha or something complicated. You can use a simple trick that is easy to get around, but which (just for this reason) is rarely used.
Example: put a false url on the link. If the user moves the mouse over the link, and generally moves the mouse (and bots do not), then we change the link to a normal one, so that the user will go where they need to. And where the bot will go is up to you. But if you stupidly block it, then the owner of the bots will quickly figure out that the bot needs to be improved. So it's better to show them something. You can show the price 2 times higher, for example.