We had 90k packets/sec traffic, so your system tagged us as getting DoSd or doing DoS.

We are using 46.4.36.194 for application that holds ~3k clients + http server. This application can send over 200 packets/sec to clients at any given time. It's nothing to worry about, as most packets are less than 50B in size and clients handle them perfectly. 90k packets/sec to 3k clients is 30 packets/sec average. It's nothing.

Incoming flood is very possible on the other hand, as there are people who doesn't want our clients to be able to use our application.

Could you increase the outgoing/incoming packet amount at witch we are getting tagged as flooding?