Comment by PeterStuer

"If any client requests /wp-admin, flag their IP ASN as bot"

You are going to hit a lot more false positives with this one than actual bots