*What do you want to do, monitor a site and if some app is hitting it
too frequently automatically report it to Google for abusing *your*
ToS?*

(Not sure what you mean by ToS, must be a AppEngine code word.)

Actually I do monitor my site. Doesn't everyone today monitor for 
pharmaceutical 
spam, SQL injection attempts and your classical bruteforce attacks? 

I'm not worry about an application hitting my sites. I see allot of good 
appid:'s . It's when an AppEngine application is used like an open proxy to 
spam sites. Then the scripts brings the hammer down.

Aren't your applications a SaaS? (Software as a Service)

Before you think, read what I have to say. 
If one of my sites picks up 20 or 30 spam posting attempts from a single 
AppEngine that's only my site. Add a few million other sites to the mix and 
your application just cost you a bundle in bandwidth to allow a spammer to 
use.  Not my bandwidth but your applications bandwidth.

I've read the "DDoS" and "Reached Quota" forum posts and my guess it's just 
spammers. They tend to flock 50 or so at a time averaging from what I detect 
2 to 5 posts per second. 
I'm thinking if you all found a way to either get live abuse reports or 
updates it might actually save you money.

I'm just trying to help you all, but if you have it handled then I'll just 
watch the apps eat your bandwidth and get posted on popular blacklists. 
Today's list includes: 

appengine-google; (+http://code.google.com/appengine; appid: domaintraker)
IP: 209.85.224.84
Contents: http alonsoalic3 . splinder . com Percocet Dose (blah blah blah)

It's only spam to me. 

I wonder how much bandwidth that app is costing:

Remember, I'm only one in a million websites and it's clear I'm the only one 
to bring up an issue that is costing you money. 
The appid listed above was reported by one site I monitor:
First seen: Report Date: 8/7/2011 4:32:41 AM last visited Report Date: 
8/18/2011 1:33:25 AM

Add 20 million and that's some good bandwidth for the appid: domaintraker. 

I'm sure there is a way to create a sub-routine to monitor POST / GET 
requests from your apps. 
I would believe that a "Human" wouldn't be sending "Post and Get" requests 
at 4 or more per second. 

I'd be glad to work with those that are willing to work on a application. 

I've opened up the NOC reports for visitors this week. You can find the 
Google IPs and Amazon listings. Look for the APPID: notice to see how often 
this happens. 
 XCtM Project v2 <http://www.xtremecomputer.com/xctm_project.asp> 

Good luck and thanks for answering my questions. 


-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-appengine/-/ZuOOAgJ6VuUJ.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to