Do you have a system to block, mitigate or monitor for "strange" IP blocks accessing systems they've never accessed before? It's a great idea if not. We have, u

Do you have a system to block, mitigate or monitor for "strange" IP blocks accessing systems they've never accessed before? It's a great idea if not. We have, unfortunately, had to do this in webhosting/billing for a long time due to the amount of fraud from specific blocks. Not as dynamic, but for instance LastPass will allow you to blacklist or whitelist entire country IP blocks. A system that also monitors (on your end, or maybe alerts the customer) that their machine in Kansas all of a sudden has multiple IPs from China/whatever accessing it (on your end seeing this globally through the network as well) would be great to mitigate events like this. If you go on vacation, you can remove the block. So far every report I've seen has been Guangzhao/Yangzhao in the access reports. Could easily, easily nip that in the bud. Obviously other proxies could be used but something like a remote access system is something people should be locking down tightly.