Bots must not limited by the 20 karars per hour.
Also we check remote host name and ip if client fools us by acting as a bot.