Comment by ryencoke

Another option since you already have OSSEC running.. Create a script for OSSEC that interacts with the cloudflare api to block the flooding IPs. This way the flood doesn't get to your server.