How to stop attack on website

Stop: Is this post about the product “Cloudflare Access”?

Or, is this post about how you access Cloudflare?

If accessing Cloudflare, post in the #security category so your post is not ignored.
Howto stop attack on my website?
My website is but attakers bypass Cloudflare security. Please help me.

use WordPress plugin, sample:
iThemes Security
miniOrange 2 Factor Authentication
Proxy & VPN Blocker (and disable “login error” asn number)
Advanced noCaptcha & invisible Captcha
Akismet Anti-Spam
404 To Homepage