AdSense account limited again for invalid traffic

My AdSense account just got hit with another invalid traffic limit after only a week of recovery. I have been using Cloudflare to block bad bots but it seems like some clicks are still triggering the filter. Does anyone have advice on how to stop these bot attacks before my account gets permanently banned?