Beside all the helpful comments: If this is a serious problem for your business, invest in Cloudflare or other professional bot-protection. They do fingerprinting and similar stuff.
Also, if you implement your own methods, do shadow-banning of bots that you identified. These attacks will stop if the time and effort the malicious actor has to invest outweigh the benefits, so the more time and effort you let them waste, the better. A good example are unsolvable and ridiculously captchas. That is obviously a double-edged sword - you need a good way of whitelisting known good actors, so the effect of false-positives on your customers is minimized.
yes. The ADHD fulfilling dopamine rush has a consequence on your brain chemistry. I started reading books in addition to blog posts, articles, etc. and it had a positive outcome on my mood. I'm reducing my internet-dopamine time more now.