High volume of bot traffic - 16.98k in 24hours

Hi there,
our website is getting a large volume of bot traffic. 16.98k in 24hours. We have updated our Cloudflare account to increase protection and set up WAF rules. The bot traffic is still coming. What else can I go to mitigate risk or reduce this unwated traffic?
Thank you in advance.