I have tried blocking ip outside India. Still, I am getting (DOS attack) request from gcloud USA. 184.108.40.206
How did you block non-India requests?
That rule works for blocking me (US). Looking up that IP address, it’s Geolocation is Netherlands. Which should also be blocked.
Do you have any other firewall rules which might allow something through?
Otherwise, they might be bypassing Cloudflare and hitting your IP address directly. That’s why you would firewall off any connections that don’t come through cloudflare.com/ips
Thanks for the suggestion. Blocking ips that don’t belong to Cloudflare was something that I was not doing. I have right now implemented it. I hope that helps.
Is there a way to see if that is what the issue was? In my web application, there is a log from which I narrowed down that 220.127.116.11 was a source of trouble. If that is missing from Cloudflare logs that would imply that they are bypassing Cloudflare. I tried going through Cloudflare logs but I could figure out an easy way to filter out data or download the log data to excel.
This topic was automatically closed after 30 days. New replies are no longer allowed.