Realistically your best option is a CDN with some layer of bot detection and blocking. Cloudflare is of course the most popular choice, https://bunny.net might also work but I haven’t tried their advanced Shield level so not sure how good it is.

Some commercial advanced firewall / WAF might also be an option. Seems most of them has Bot mitigation features, but I haven’t tried their never personally tried anything like that.