This only applies if you use our cloudflare nameservers
Under Manage > Firewall you have 3 additional firewall options through cloudflare.
You can Restrict the wp-login page to Australia only. International users will need to pass a captcha before being able to enter the login page.
Bot Management can be enabled to use Cloudflare’s AI bot management tool to block out bad bot requests while allowing the good ones to pass through.
You can also Block XML-RPC requests which restricts XML-RPC to WordPress servers only. This setting can be enabled and JetPack and VaultPress will still work.