Filter host names, not just ips. There are websites out there that keep track of the big ones for this very purpose. Just Google some of the host names producing lots of the bot traffic and they should come up