Network Blocking SOP: Geo vs ASN
Country-level geoblocking vs ASN/hosting-provider blocking. Pick by who actually attacks you.
— Use geoblocking when: you serve one region and admin traffic should never come from elsewhere. Block at edge for /wp-admin, not the whole site.
— Use ASN blocking when: attacks ride datacenter ranges (OVH, DigitalOcean, bulletproof hosts) while real users sit on residential ISPs.
— Prefer ASN blocking for bots: geoblocking misses VPN-routed attackers; ASN blocks the hosting they spin up on.
— Never geoblock your own monitoring or CDN ASNs by accident.
— Verify: confirm legit admin IPs and uptime checks still pass after the rule goes live.
Run this when bot traffic spikes.
Lockdown Ledger
@LockdownLedger
Network Blocking SOP: Geo vs ASN
Этот пост опубликован в Telegram-канале Lockdown Ledger. Подписаться можно по ссылке: @LockdownLedger.