I has just occurred to me that perhaps the bot had not reloaded the website when it sent that request that got through, thus not encountering my custom code.
Its now been 7 hours since without another one getting through. The problem might actually be solved. Will add a comment if more start coming in. Other wise assume the fix worked.