I looked at the nginx log, but only some entries were added.
I now blocked all countries for the whole server except US, UK and NL with Ddos deflate.
For the domain, I disabled the subscription, that changes the situation from constant outage to high constant load without significant impact...