wc-api Vulnerabilities

Scammers are targeting one of my sites WooCoomerce sites Stripe APi. I’m getting thousands of requests via ?wc-api=wc_stripe. They’re checking credit cards which are being logged in stripe. I have put the site into maintenance mode but they’re still able to check cards and create logs/responses via stripe. I’m at a loss as to how I can protect the wc-api=wc_stripe endpoints from this abuse. Any direction would be appreciated.