Cloudflare

To ensure you don't have constant attacks getting through. Change your configuration around for CF and make sure to set the protection mode to "Agressive UAM" - Under Attack Mode.
This will ensure a captcha is requested when a user enters the site.