Hi @spizzylope, thanks for reaching out!
Wordfence works on sites running WooCommerce and various features compliment it. You may find the plugin can assist with Brute Force, Rate Limiting, or manual IP blocks if the requests are frequently from the same IP or range.
However, taking orders is specific to e-commerce platforms rather than WordPress itself. There are add-ons for WooCommerce I’ve seen such as “WooCommerce Fraud Prevention” that has advanced blocking features for many of the transaction characteristics you’re seeing here. There are likely other free and paid add-ons to do this, and we aren’t affiliated with (or recommend) any in particular.
Many thanks,
Peter.
