Blocked countries still get access to my site

[tomer]

Answer these questions to help the Community help you with Security questions.

eilot.org.il

Have you searched for an answer?
Yes

Describe the issue you are having:

I blocked access to the site for all countries except Israel, but I still see traffic within the site from countries like Turkey, Egypt, etc. in Google Analytics reports

[Chaika]

If you , this has come up quite a few times before, and this post by sdayman sums up quite a few of the most likely reasons (ignore the page rule suggestion):

Blocked countries still visiting my website

Geolocating is not 100% accurate. If Cloudflare and Google Analytics aren’t using the same Geo database, you’re bound to get some discrepancies. Your Page Rule would be easier to manage if you use the Country IS IN, then put all your countries in that one option. You may have a conflicting setting somewhere else that’s letting them through. Those visits may by bypassing Cloudflare and accessing your site directly by server IP address. That’s why it’s good to firewall all connections t…

Essentially, geoblocking isn’t 100% accurate, Cloudflare and Google Analytics use different geo IP databases, and your origin web server may not properly be configured only to allow Cloudflare IPs, and they may be bypassing Cloudflare altogether.

Protect your origin server · Cloudflare Fundamentals docs