First get the ips and trace them via https://whatismyipaddress.com/
See if all coming from the same origin. If so lookup on google the ASN number for them.
You can then block this in cloudflare via security - security rules
Add a rule that is an IP Access rule. See screenshot
