Kindly, if possible, I’d rather suggest you to add them to the Security → WAF → Tools → IP Access Rules with the action “allow” for your Website.
The requests might be hitting the “Bot Fight Mode” or “Browser Integrity Check” feature, which you might have enabled at your Cloudflare dashboard for your domain name. You can try to disable it and see if anything different, if so.