Insufficient Traffic Blocking

Overview

Sometimes this isn't applicable as a finding but more or less knowing your client and their traffic.

Traffic from some parts of the world where they won't be doing business with should be Geo-blocked and dropped as best practice.

This may not apply the massive companies that need to business around the world.

Example

Evidence of web access from places around the world