PHP: what should I do with users/crawlers/spammers if I have detected them but do not want to exclude (exit) them completely

Question

due to too many requests it sometimes slows down my server (website). Today I had again a "security expert" from a country far away.. who deliberately "interf