Depending on your app, yes, you can block DO. You can probably block all of AWS and GCP as well. You can take it further and block all non-residential ASNs. Yo

Depending on your app, yes, you can block DO. You can probably block all of AWS and GCP as well. You can take it further and block all non-residential ASNs. You'll block some legit traffic, but the majority of normal users will not be affected. What is the persona of your average user? Average people shopping online? None of them are connecting through weird ASNs. Someone complaining about a VPN being blocked? It's cost-benefit, tell them tough shit.