I don't understand why Wordfence would stop alerting us if there's a botnet attack? I too want to know about them.
I'd rather not add strict rules to htaccess if I can help it. The last time I did that there were false positives and I had to remove over half the rules.