How to exclude invalid access data from the source

I have a problem, when AA opens a new mechanism to prevent robots from maliciously refreshing data

Our website is now refreshed frequently to generate PageView and there is only one UV. Every week will change their IP address. So we can't use IP or Browser exclude them. Is there a way to add a custom rule shielding rule, similar to the same IP address refreshed more than n times in 1 minute, not recorded.

Is there a better way to solve this problem?