If you didn't try already I would log the http requests at a low level to see if there is some some unique string they use for the user-agent or some other http header field. Bot authors are stupid and lazy IMO, they might have some crap in there you can just block from apache...