That would work for a percentage of bots. That method is used in the ad fraud detection world, but a lot of the bots simulate mouse moves and other user activities now. There are other ways to whitelist visitors, however.