There is someone who is spaming on my tool website by changing his ip last digits below is changing so can someone guide him does i block him in correct way and another thing i also want to ask does this will block other users who are real users who are not spaming
You can block that ASN in the WAF if it’s not somewhere you expect to receive requests from. Otherwise, you can challenge it if its a bot so real users from that ASN can still get through.
As sjr suggested, then I would also recommend that you create a custom firewall rule where you give a managed challenge to ASN = 45669. This should block bot traffic and let real users through. Blocking whole IP ranges would also block real users.