How to block traffic from and or

My site is getting thousands of bot signups and then we are getting errors when the server sends confirmation emails.

How do I block all incoming traffic from and/or

I’ve tried creating various WAF rules which don’t seem to help.

It looks like neither of these records is going over Cloudflare

% dig +short

% dig +short

Without the record behind the proxy you are only using our DNS services for it.