SQLmap was used to successfully bypass Ghauri WAF in this case by using the Origin Ip. It initially failed but was successful with the mentioned technique. Ghauri WAF is recommended for further testing.
Check out the original tweet here: https://twitter.com/Joyerz5/status/1858813286495776855