ASN Unblocking

Website, Application, Performance Security
1

Trying to unblock a valid ASN (as per CF): AS396982, AS32934 but getting errors not found.

I already added AS15169 and AS8075 ok, but when I delete and try to add again, I get the same error “Country, IP address, or ASN not recognized”.

Also added the Google ASN to WAP IP Access rules set to Allow ThisWebsite, but Google still returning 403 errors on crawls

Is there a list of standard ASN’s that should be enabled for indexing, etc? Bing ASN?

perhaps an easier way to resolve this issue?

2

Our approach is:

For Google:

  1. Create a list of the Google IP ranges from the info they publish: googlebot_ip_lists

  2. Create a rule that blocks any google IPs that are not in the expected list and are not verified bots:

(ip.geoip.asnum in {15169 396982} and not ip.src in $googlebot_ip_lists and not cf.client.bot) then block

For BingBot:

  1. Bing is more difficult as AS8075 is a major source of attacks on our sites so we use:

(ip.geoip.asnum eq 8075 and cf.client.bot and http.user_agent contains "bingbot.htm)

and then not in a long list of blocked Bing IP ranges, not using a long list of blocked paths, etc. as Bing ignores sitemaps and robots.txt, then allow

If you are getting the error "Country, IP address, or ASN not recognized” make sure you enter it as the full ASN: AS32934 and click on the value in the popup
image

1 Like
3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.