Your email address was leaked, you might want to use different email address.
As for your question, i'd have to disagree since CloudFlare do the job better than manual IP ban.
I would also disagree with you as it is enough to just enter 'username' and ask for password reset.
And this should be changed/removed to improve forum security.
