Cloudflare not registering as an attack and not passing real IPs

probably need to setup fail2ban type config or scripted Cloudflare API on your backend origin server which can pass bad ips back to Cloudflare firewall though Cloudflare has limits on number of Cloudflare firewall ips they can hold Cloudflare IP Firewall Limitations?