Comment by amikazmi

If they use different IPs, and normal user request speed, the only way to differentiate is by irregular user usage patterns (too many pages for a session, going bfs instead of dfs etc)

But if they don't hit your server heavily, why do you care?