How to properly block spam bot access to the site?

Question

System administration

There is an online store. Spam orders are pouring in every day through the quick order form. Based on the logs, I calculated at least two IP addresses from which these orders are sent by POST request.
How to properly block them? Some directive in .htaccess? What other ways to deal with such bots are there? I don't want to put a captcha.
Thank you.

Answer 1

order allow,deny
deny from ip1
deny from ip2
allow from all

this is a bad solution, better use captcha

Answer 2

Do not use captchas, they are standard and get by with bots once or twice, use a question on the subject of the site, from personal experience this cut off all automatic bots.