My suggestion is to use a diagnosis tool for your website. Something like https://botmenot.com/

It will tell you how well protected your website is from bots and give you the evidence of the testing done, so you can know how to proceed.