New option under Options -> External service providers -> Block IP addresses on spam clean from user approval queue (it's off by default, so you will need to enable it if you want to use it).
Added additional info for cases where there's an exception making request to Cloudflare's API, but without an actual error received from the API.