ASN Blocker
The ASN Blocker lets you block all traffic from a specific network provider by its Autonomous System Number (ASN). This is available on Pro plans only.
What Is an ASN?
An Autonomous System Number (ASN) is a unique identifier assigned to a network operator — such as an internet service provider, cloud hosting company, or large organization. Every IP address on the internet belongs to an ASN.
By blocking an ASN, you block all IP addresses owned by that network provider in a single rule, rather than having to block individual IPs.
Common examples:
| ASN | Provider |
|---|---|
| AS16509 | Amazon Web Services (AWS) |
| AS15169 | Google Cloud |
| AS8075 | Microsoft Azure |
| AS13335 | Cloudflare |
| AS14061 | DigitalOcean |
| AS9009 | M247 Europe SRL (commonly used by bots) |
Adding an ASN Block
- Go to ASN Blocker from your dashboard.
- Click Add ASN Block.
- Fill in the modal:
- Name — A descriptive label (e.g., “Amazon AWS”). Optional.
- ASN — The ASN to block, in the format
ASfollowed by a number (e.g.,AS16509). Required. - Page selection — Choose All pages or Selected pages (specific pages, collections, products, or blogs).
- Redirect page — Optional URL to redirect blocked visitors.
- Click Save.
Managing ASN Blocks
ASN blocks are displayed in a table with the following columns:
| Column | Description |
|---|---|
| Name | The descriptive label you provided |
| ASN | The ASN number (e.g., AS16509) |
| Status | Toggle switch to enable or disable the block |
| Actions | Edit button to modify the block |
Each block can be individually enabled or disabled. Disabled blocks remain saved but are not enforced on the storefront.
Duplicate Prevention
You cannot add the same ASN twice. If you try, an error message appears: “This ASN is already blocked.”
How It Works on the Storefront
- When a visitor loads your store, Kedra Shield fetches their IP data, which includes their ASN.
- The visitor’s ASN is compared against your list of blocked ASNs.
- If matched and the block is enabled, the visitor sees the block page or is redirected.
- If the visitor’s ASN cannot be determined, they are allowed through (fail-open design).
ASN blocking requires IP data from the detection service (ProxyCheck.io), which provides the ASN for each visitor’s IP address.
When to Use ASN Blocking
- Blocking cloud providers: If you see bot traffic coming from AWS, Google Cloud, or other hosting providers, blocking their ASN stops all traffic from those networks.
- Blocking specific ISPs: If a particular ISP is a source of fraudulent or suspicious traffic, you can block their entire network.
- Targeted network blocking: When a customer reports a specific ASN causing problems (e.g.,
AS16509for AWS), you can block it in one step.
Note: Be cautious when blocking major cloud providers. Some legitimate services (e.g., monitoring tools, payment processors) may use these networks. Test carefully after adding ASN blocks.
Pro Plan Requirement
The ASN Blocker is available exclusively on Pro plans. Free plan users see a warning banner:
“You are currently on the free plan. Upgrade to Pro to use this feature.”
The Add ASN Block button is disabled on the Free plan.
Next Steps
- Referrer Blocker — Block visitors from specific referring websites.
- IP Blocker — Block individual IP addresses or ranges.
- VPN & Proxy Blocker — Block visitors hiding behind VPNs.