https://apniphysics.com/advice-from-semalt-block-wp-login-php-brute-force-attacks-with-cloudflare-page-rules/
Advice From Semalt: Block WP-Login.php Brute Force Attacks With CloudFlare Page Rules