IPs keep changing
There are so many IPs to compromise and so many IPs rotating during a DDOS. Look at web hosting companies advertising their DDOS protection in their web hosting package. If you're under attack too seriously they will kick you out without asking your opinion. There is always a limit to not cross
Cloudflare itself buy IP lists from companies to complete their own