Got hit with this last week also. Noticed HUGE spikes in random traffic coming from Brazil where usually I get almost none. What I did was in Cloudlfare, head into the security settings and set up a rule to present an "Interactive Challenge" to any traffic coming from Brazil. Stopped it dead...