It looks like the requests weren’t blocked because they were made by Cloudflare, for services like Signed Exchanges.
For every request coming from 2a06:98c0:3600::103, there was a request with the same Ray-ID coming from real Google IP addresses in the logs.
Same issue in this topic, where it was linked to different Cloudflare services.