We have an option to safely filter "good" bots (Google and Facebook). Those clicks do not appear in your reports but bots can still check your campaigns.
"Bad" bots cannot be filtered automatically as it's difficult to identify them and they are changing too fast. So the best option here is to find them with the help of reports (for example, analyse the IP click report-a real visitor will not click on the same ad more than 10 times so most likely it's a bot) and then block those IPs or UAs.