Your best bet would be to put a capcha on the website itself. Botpress doesn't have a built-in way to ban IP addresses