Those are the good bots, which say who they are, probably respect robots.txt, and appear on various known bot lists. They are easy to deal with if you really want. But in my experience it is the bad bots you're more likely to want to deal with, and those can be very difficult, e.g. pretending to be browsers, coming from residential IP proxy farms, mutating their fingerprint too fast to appear on any known bot lists, etc.
Right, if you add up the named bots in my list it only comes to about 1.5k. But there's another 1-2k of bots per day pretending to be browsers but I am okay with that.
It's just the malicious ones I ban. And indeed I've banned nearly every hosting service in Wyoming (where shady companies don't have to list their benefactors and it's all malicious actor fronts) and huge ranges of Russian and Chinese IP space. My list of IP ranges banned is too long for a HN comment.
