Bots still accessing our website despite having set up blocks for “Likely automated

Are you able to see the bots in your Security events? Events are here, https://dash.cloudflare.com/?to=/:account/:zone/security/events

If so, you can craft a rule to block them. Good conversation here, DOS attack - #9 by cloonan