Ask HN: How to Catch Bad Bots?

I do part-time server admin & wonder how others monitor their webserver(s) for badly behaving bots like scrapers, DDoS, etc. What tools & procedures do you use & follow?