To be fair, this shit is hard to control and prevent. I've ran small chans since I was like 14, and knew people who have said the bots find ways to circumvent hash blocks or bans.
Blocking VPNs would be the only way to stop them from the sounds of it, but I feel dirty doing that.