Blocking AI content bots is the name of the game. Luckily most of the big hitters stick with a unique user agent string and/or IP.
(My site is basically a search engine, which complicates matters because there's effectively an infinite space of URLs. Just one of these rogue bots can scrape millions of pages from tens of thousands of IPs; and I think there are hundreds of the bots at any given moment...)