cloudflare IPs being blocked?

I can no longer find the option to check for cloudflare. With a site running latest WP (4.2.2) and 6.0.3 WordFence free edition and having been on the same setup for month (possibly years), upgrading as required – I’m now seeing Cloudflare IP ranges throttled + blocked.

Example from yesterday at 3:10PM:

Wordfence has blocked IP address 108.162.215.21.
The reason is: “Exceeded the maximum number of 404 requests per minute for a known security vulnerability.”.
User IP: 108.162.215.21
User hostname: 108.162.215.21
User location: Montebello, United States

This is very troubling.

https://wordpress.org/plugins/wordfence/