Since the faker's requests don't have a User-Agent, you could block all requests lacking a valid User-Agent HTTP header.