Hello,
are those bots performing "valid" requests? For example looking for a page that simply doesn't exist or trying to access the same page several times?
Admin Tools can only protect you when a visitor raises a security exception, so you can safely block it.
In your case, if they "only" generate a tremendous amount of traffic, the only solution is to use a Content Delivery Network, like CloudFlare.
They have a free tier and the setup with Joomla is pretty simple, so I'd suggest you to take a look at it.