From a technical standpoint, what else can they do?

Your IP is coming from the cloud just like all the actual bot traffic.