Ip addresses are not blocked

Good people, tell me what the problem is. I block the ip of detractors in firewall-tools. But they continue to visit my site and in the analytics system I continue to see their ip. And for the test, I block my ip and everything is blocked correctly. What could it be???

Which Analytics system is showing this?

Yandex Metrika

It’s possible they’re bypassing Cloudflare and hitting your origin directly. Have you configured a firewall on your server to block all traffic that does not come from the list at cloudflare.com/ips?

I didn’t really configure the server, just made a list of ip addresses. No cloudflare ip listed