ASN-Based Blocking

[nOw-Ay]

Hello,

I’ve been receiving a significant number of malicious requests originating from certain U.S.-based ASNs.

However, I don’t want to block all U.S. inbound traffic, as some of my services depend on legitimate connections from the U.S.

I know that MaxMind provides access to their ASN database under their free plan, similar to their geolocation database. Would it be possible to implement automated ASN-based blocking using that data? I think tha would be a nice extension to have even if it maybe goes out of the scope of geoip-shell.

Thanks a lot for your help!

[friendly-bits]

Hi, thanks for the feature request. I'll look into this.

[thenightfighter]

Would be great if you could add this to geoip-shell.

I've found this. Maybe it helps a bit?
https://github.com/MarcoMarcoaldi/ASN_IPTables_Blocker.sh