Add a hidden checkbox. If checked, it's definitely a bot. You get rid of more than 99.99% of bots, from my experience.