I think this is a good approach for identifying who this is, but you should assume good faith. They probably don't even know they're causing you problems. Try asking them nicely to limit their request rate, and only block them if they're not willing to do that.