Blocking Robots

Hey y'all, I'm new to this blocking robots game and I'm seeing how insidious it can get.

My site is an intelligence site with a ton of data that's already the target of a bunch of scrapers and they're killing my memory. Sometimes my server's at 99% memory utilization:


and Cloudflare's starting sending me warnings about the amount of bot traffic on the server


Aside from turning on Cloudflare's Bot security what else would you normally do to fight these types of attacks?

Use a firewall, if you use WP a nice one to block bots are BBQ Pro to block them, the developer also has a non-wp version of 7G Firewall here.