TrackingSpamPrevention - block ISP / ASN by name

Knowledge base
1

Hello,
in my bot blocking experiences I see a option in the TrackingSpamPrevention, that is better than IP or CIDR blocking.

The Matomo PlugIn “TrackingSpamPrevention” has an option to block ISP via the DP IP to ASN database in the GeoIP settings.

  1. activate GeoIP
    go to matomo Settings → System → Geolocation
  • Location provider
    • DBIP / GeoIP 2 (Php) - activate
      ↓
  • Setup automatic updates of geolocation databases
    • ISP Database
      • https://download.db-ip.com/free/dbip-asn-lite-2026-07.mmdb.gz
    • Update databases every:
      • month
  1. set ISP names for blocking
  • open on the server the file config/config.ini.php
    • go to the section
      • [TrackingSpamPrevention]
    • expand the array:
      • block_geoip_organisations

like:

block_geoip_organisations[] = "twitter"
block_geoip_organisations[] = "deutsche telekom global business solutions"
block_geoip_organisations[] = "fastly"
block_geoip_organisations[] = "logicweb"
block_geoip_organisations[] = "dataport"
block_geoip_organisations[] = "cityfibre"
block_geoip_organisations[] = "cox communications"
block_geoip_organisations[] = "vodafone germany business"
block_geoip_organisations[] = "terratransit"
block_geoip_organisations[] = "gtt communications inc"
block_geoip_organisations[] = "amazon.com"
block_geoip_organisations[] = "vultr"
block_geoip_organisations[] = "bell canada business"
block_geoip_organisations[] = "fiber optical network"
block_geoip_organisations[] = "google virtual private cloud"
block_geoip_organisations[] = "asadov ruslan rafaelevich"
block_geoip_organisations[] = "contact consumers"
block_geoip_organisations[] = "spectrum networks"
block_geoip_organisations[] = "cisco opendns"
block_geoip_organisations[] = "zayo bandwidth"
block_geoip_organisations[] = "ace data centers"
block_geoip_organisations[] = "bite lietuva"
block_geoip_organisations[] = "oculus networks"
block_geoip_organisations[] = "ovh sas"
block_geoip_organisations[] = "sprious"
block_geoip_organisations[] = "web2objects"
block_geoip_organisations[] = "zayo bandwidth"

consider: The names are compared case insensitive. The names are saved in lower case to preserve CPU load by the comparing.
Save the edit.

1 Like
Matomo Tracking Bot Filter (PHP)
Bot Blacklist (IP CIDR collection)
2

append:

block_geoip_organisations[] = "db systel"
block_geoip_organisations[] = "gsl networks"
3

append:


block_geoip_organisations[] = "ecotel communication"
block_geoip_organisations[] = "uk-2 limited"
block_geoip_organisations[] = "informacines sistemos ir technologijos"
block_geoip_organisations[] = "glesys ab"

consider:
Maxmind: UK2.NET
DP-IP: UK-2 Limited

missing in DP-IP
UK-2 Limited:
37.130.229.0/24
107.182.232.0/24

4

append:

block_geoip_organisations[] = "BWI GmbH"

consider: in MaxMind database only “BWI”, but there are more ASN included this string.

missing in DP-IP
Cisco OpenDNS:
146.112.162.0/23

Corporate (not recognizable in DP-IP lite DB)
1&1 Versatel:
61.8.150.0/24

5

Thanks for sharing this. Blocking by ISP/ASN can be much more practical than maintaining long IP or CIDR block lists, especially when dealing with traffic from cloud providers or known bot networks.

One thing I’d suggest is being a bit careful with broader entries like amazon.com, Fastly, or Google Virtual Private Cloud. They host plenty of legitimate services as well, so blocking them outright could filter out valid visitors depending on your audience.

For anyone trying this, I’d recommend monitoring the logs for a while after adding new organizations to make sure you’re not accidentally blocking legitimate traffic. Overall, it’s a useful approach for reducing unwanted bot traffic with much less maintenance than IP-based blocking.

6

Thanks for pointing these out. That’s helpful information.