Added Cloudflare WAF rules to block bots from crawling/testing for these URIs - /wp-login.php, /xmlrpc.php, /.env - if this doesn't work, will try go Pro to get access to Managed Rulesets #lifelog