I've been trying to set up similar anti-bot checks for my own site. Would you be willing to share the full list of user agents that you check against? I understand the very obvious reason why you might not want to, so no worries if you'd rather not.
this isn't AI useragents specifically but this is the nginx blockline. yes it is long and stupid
Steam HTTP Client|AhrefsBot|Semrush|baidu|sogou|YisouSpider|GPTBot|ChatGPT|meta-webindexer|externalhit|externalagent|ClaudeBot|amazonbot|yandex|semantic-visions|Ai2Bot|SeekportBot|PerplexityBot|imagesift|applebot|Go-http-client|python-|l9explore|openai|Wget|umich.edu|l9explore|CheckHost|Orbbot|HttpClient|http-client|Hostio|HeadlessChrome|arquivo|axios|absearch-crawler|CCBot|ShapBot|aiohttp|cpprestsdk|DataForSeoBot|sleepbot|ludosbot|SitemapBot|intelx|yacybot|sqlmap|securityscan|dialtoneapp|libredtail|ClueWeb|image-downloader|mwmbl|Augur|libredtail|okhttp|GlowfruitProbe|owler|okhttp|arquivo|l9explore|bytespider|vuln|globalping|Geminibot|Chrome-Lighthouse|matdoes.dev|keys-so-bot|curl|Dalvik
Alterspring uses Markdown for formatting
*italic text* for italic text
**bold text** for bold text
[link](https://example.com) for link