We have just implemented a rule on the Webfusion load balancers to block a particularly aggressive bot from a customer's websites. It would be good to have this functionality in 365. This may be either through the CMS Gateway, or through the use of a web application firewall.