I’d take an all-hands on deck approach to block these, I’d start with firewall but bot fight mode may be interesting in this case, details here, Expert Tip - Bot Management & Bot Fight Mode. Can you identify the IPs of the bots that are hitting your forms page?