CloudFlare Threat Management allows you to manage all banning, unbanning, and clearing of IP addresses at CloudFlare level.
Enter the email which you use to login to CloudFlare com & your API key found here.
Once you save that information into CloudFlare Threat Management, you'll be able to specify list of IP address to blacklist, whitelist and clear ..
It's important to note that any changes you do while using CloudFlare Threat Management populate across your CloudFlare account.
This means that if you have 50 domains registered under your CloudFlare account, and you ban IP address, that address is banned across all 50 domains.
This is helpful if you know IP addresses are malicious and that you never want them to access your websites..
For example, you can at your leisure, ban all locked out IP addresses from WordFence, or even ban all IP addresses.
This means that if you got hit with brute force attack with bots trying to login to your admin control panel, you can in one click, ban all IP addresses.
First, WordFence allows locking user out for maximum of 60 days, whereas CloudFlare ban is permanent..
If you are getting hit by dozens of bots per second, and you ban these bots, they will never even hit your server.
Read more