If they're not respecting robots.txt, and they're causing degradation in service, it's unauthorised access, and therefore arguably criminal behaviour in multiple jurisdictions.
Honestly, call your local cyber-interested law enforcement. NCSC in UK, maybe FBI in US? Genuinely, they'll not like this. It's bad enough that we have DDoS from actual bad actors going on, we don't need this as well.
replies(2):