Hmm not really sure what to tell you. We do not bother with trying to block individual bots sitewide since the task of adding bad bots would go on forever. We just use this Server Protocol HTTP/1.0 bot blocking code below, which blocks the majority of bad bots sniffing around the Login page since that is a page you want to protect from bad bots.
http://forum.ait-pro.com/forums/topic/protect-login-page-from-brute-force-login-attacks/
# BRUTE FORCE LOGIN PAGE PROTECTION # Protects the Login page from SpamBots, HackerBots & Proxies # that use Server Protocol HTTP/1.0 or a blank User Agent RewriteCond %{REQUEST_URI} ^(/wp-login\.php|.*wp-login\.php.*)$ RewriteCond %{HTTP_USER_AGENT} ^$ [OR] RewriteCond %{THE_REQUEST} HTTP/1\.0$ [OR] RewriteCond %{SERVER_PROTOCOL} HTTP/1\.0$ RewriteRule ^(.*)$ - [F,L]