How about making changes to the interface html structure/ids and same for the api. Will break any program using it, but won't bother users. Now record what accounts are silenced by that, do it multiples times and ypu have an idea who is a bot ?