These scanner bots use wide range of IP addresses VPS with VPN to hijacked residential IP addresses via hacked IoT devices and routers. So a better strategy is to block the bots by their scanning pattern like you had mentioned.