They quite possibly have your real IP, best place to start is with your host. It is possible the IP is being leaked through one or more of the following:
- Email Headers
- Image and Link Proxy
- Disable all remote file upload like avatars and media gallery
So a IP change may be necessary. Also go with CloudFlare pro plan, their support should be able to help you configure the settings properly.