ASN Blocker

The ASN Blocker lets you block all traffic from a specific network provider by its Autonomous System Number (ASN). This is available on Pro plans only.

What Is an ASN?

An Autonomous System Number (ASN) is a unique identifier assigned to a network operator — such as an internet service provider, cloud hosting company, or large organization. Every IP address on the internet belongs to an ASN.

By blocking an ASN, you block all IP addresses owned by that network provider in a single rule, rather than having to block individual IPs.

Common examples:

ASNProvider
AS16509Amazon Web Services (AWS)
AS15169Google Cloud
AS8075Microsoft Azure
AS13335Cloudflare
AS14061DigitalOcean
AS9009M247 Europe SRL (commonly used by bots)

Adding an ASN Block

  1. Go to ASN Blocker from your dashboard.
  2. Click Add ASN Block.
  3. Fill in the modal:
    • Name — A descriptive label (e.g., “Amazon AWS”). Optional.
    • ASN — The ASN to block, in the format AS followed by a number (e.g., AS16509). Required.
    • Page selection — Choose All pages or Selected pages (specific pages, collections, products, or blogs).
    • Redirect page — Optional URL to redirect blocked visitors.
  4. Click Save.

Managing ASN Blocks

ASN blocks are displayed in a table with the following columns:

ColumnDescription
NameThe descriptive label you provided
ASNThe ASN number (e.g., AS16509)
StatusToggle switch to enable or disable the block
ActionsEdit button to modify the block

Each block can be individually enabled or disabled. Disabled blocks remain saved but are not enforced on the storefront.

Duplicate Prevention

You cannot add the same ASN twice. If you try, an error message appears: “This ASN is already blocked.”

How It Works on the Storefront

  1. When a visitor loads your store, Kedra Shield fetches their IP data, which includes their ASN.
  2. The visitor’s ASN is compared against your list of blocked ASNs.
  3. If matched and the block is enabled, the visitor sees the block page or is redirected.
  4. If the visitor’s ASN cannot be determined, they are allowed through (fail-open design).

ASN blocking requires IP data from the detection service (ProxyCheck.io), which provides the ASN for each visitor’s IP address.

When to Use ASN Blocking

  • Blocking cloud providers: If you see bot traffic coming from AWS, Google Cloud, or other hosting providers, blocking their ASN stops all traffic from those networks.
  • Blocking specific ISPs: If a particular ISP is a source of fraudulent or suspicious traffic, you can block their entire network.
  • Targeted network blocking: When a customer reports a specific ASN causing problems (e.g., AS16509 for AWS), you can block it in one step.

Note: Be cautious when blocking major cloud providers. Some legitimate services (e.g., monitoring tools, payment processors) may use these networks. Test carefully after adding ASN blocks.

Pro Plan Requirement

The ASN Blocker is available exclusively on Pro plans. Free plan users see a warning banner:

“You are currently on the free plan. Upgrade to Pro to use this feature.”

The Add ASN Block button is disabled on the Free plan.

Next Steps