I have tried blocking ip outside India. Still, I am getting (DOS attack) request from gcloud USA. 220.127.116.11
How did you block non-India requests?
That rule works for blocking me (US). Looking up that IP address, it’s Geolocation is Netherlands. Which should also be blocked.
Do you have any other firewall rules which might allow something through?
Otherwise, they might be bypassing Cloudflare and hitting your IP address directly. That’s why you would firewall off any connections that don’t come through cloudflare.com/ips
Thanks for the suggestion. Blocking ips that don’t belong to Cloudflare was something that I was not doing. I have right now implemented it. I hope that helps.
Is there a way to see if that is what the issue was? In my web application, there is a log from which I narrowed down that 18.104.22.168 was a source of trouble. If that is missing from Cloudflare logs that would imply that they are bypassing Cloudflare. I tried going through Cloudflare logs but I could figure out an easy way to filter out data or download the log data to excel.