If unsure look up the IP addresses and see if they are in data-centers or home/mobile networks. [2a][2b] Most real people will be using HTTP/2.0 assuming you log this in your web server access logs and most bots will be HTTP/1.1 with some very rare exceptions. The stinky bad bots will also show up on mobile networks but the vast majority of them will be using HTTP/1.1.
[1] - https://securityheaders.com/?q=https%3A%2F%2Fnews.ycombinato...
[2a] - https://bgp.he.net/
[2b] - https://bgp.tools/