U need disallow useless requests, for example .png .mp4,mb some .js / .css e.t.c. and u need to test, that ur denied requests dont impact ur script normall work
The module cannot be turned on while you are running the program.
You can use Captcha Custom module or an extension of any Captcha Solving Service to use