You could consider running Crowdsec as well on yr firewall that way known bots will be blocked