ModSecurity + optional LiteSpeed/Commodo ModSecurity rule set, but each UA you want to block must me added by hand.
If you have cPanel ConfigServer Security & Firewall is recommended, because CSF supports ModSecurity.
https://www.configserver.com/cp/csf.html