Hi there caitrionamctiernan
At this situation I would advise to leave Cloudflare’s “Block AI Scrapers and Crawlers” running and if it isn’t enough you can specify within a WAF rule a block action on those specific bots and of course to take into consideration the list here:
https://radar.cloudflare.com/traffic/verified-bots
If opting to add the WAF rule be attentive to have “Verified Bot Category”
Hope this clarifies.
Cheers!