I added some "webconfig" rules that Dreamhost suggested. They catch well known bad things like "timthumb" attempts etc. When that catches something, it triggers a 503 response. So.... I wrote a dynamic 503.php which calls ZBBlock, bans that IP-- and then my other script reads the killed_log.txt file in ZBBlock and bans it at Cloudflare!