Block Cloud Hosting Providers

If you are receiving bot traffic, scraping attempts, or automated attacks from cloud hosting services like AWS or Google Cloud, you can block their entire network using the ASN Blocker (Pro plan required).

Why Block Cloud Providers?

Most automated bots, scrapers, and credit card testing tools run from cloud hosting services rather than residential internet connections. Blocking the network provider’s ASN stops all traffic from that provider in a single rule, regardless of which specific IP address is used.

Common Cloud Provider ASNs

ASNProviderCommon Use
AS16509Amazon Web Services (AWS)Frequently used by bots, scrapers, and automation tools
AS15169Google CloudCloud-hosted bots and services
AS8075Microsoft AzureEnterprise cloud automation
AS13335CloudflareWeb infrastructure and proxy services
AS14061DigitalOceanCommonly used for lightweight bots and scrapers
AS9009M247 Europe SRLFrequently flagged for bot and VPN activity

How to Block an ASN

  1. Go to ASN Blocker from your dashboard.
  2. Click Add ASN Block.
  3. Enter a Name (e.g., “Amazon AWS”).
  4. Enter the ASN in the format AS followed by the number (e.g., AS16509).
  5. Choose All pages or Selected pages depending on whether you want to block on the entire store or specific sections.
  6. Click Save.

Repeat for each provider you want to block.

Cautions

Legitimate services may use these networks

Some services you rely on may route traffic through cloud providers:

  • Payment processors running fraud checks.
  • Google Shopping and Facebook Ads verification crawlers.
  • Monitoring and uptime services.

Kedra Shield’s VPN/bot detection engine allows traffic from major cloud providers (Google LLC, Amazon.com Inc., Amazon Data Services, Microsoft Corporation, Cloudflare Inc., DigitalOcean) by default to avoid blocking legitimate services. However, the ASN Blocker runs separately and before this allowlist is evaluated — so adding an ASN block for a cloud provider will block that provider’s traffic regardless of the VPN/bot detection allowlist.

Test your store after adding ASN blocks to confirm no legitimate services are affected.

ASN blocking requires Pro plan

The ASN Blocker is available on Pro plans only. Free plan users see a warning banner with an upgrade prompt.

How to Identify Problem ASNs

  1. Go to Analytics > Blocked IPs in your dashboard.
  2. Look at the Top Network Providers section — this shows the most common network providers among blocked visitors, along with their ASN.
  3. If you see a provider with high volume, click the Block button next to it to add an ASN block directly.

You can also check the Visitor Details modal for any visitor to see their ASN and provider name under Network Information.

Next Steps