Bot attacking my http forms on website

Hello, I’m a long time Cloudflare user but first time Community visitor.

My site has been getting attacked for over a week and hundreds of times by a bot that uses random email addresses to try to log in and create a new account.

I’ve switched on the DDos protection which has slowed it down, but it’s still happening.

Any assistance and/or tips very welcome.

Thanks

Simon