Spammer's IP address bypassing Cloudflare's Firewall?

My cheater method is to use .htaccess: