Personally I just have honeypot URL's, once visited, the IP gets blocked, exceptions for google/bing.
No-one browsing the site would visit this URL, so anything visiting it would mostly likely be a bot or someone being nosey.
Exceptions for google are easy as their IP addresses are listed, however Bing's arent so be careful. Many bots use googlebot/bing as their user-agent, so you do need to verify their IP for validity.