A lot of bots will be able to make requests from a range of IP addresses. If you rate limit one, they just start sending requests from the next.