If you put those into an IP lookup utility, you'll find that they are actually all "planetlab" related.
I believe that what is happening is you are being DOS'd by a botnet created by these guys: http://www.planet-lab.org To report a suspected violation of this policy, contact PlanetLab Support ([email protected]). If that doesn't stop it, sue them. Call the FBI. Contact everyone on the steering committe: http://www.planet-lab.org/consortium On Aug 9, 2012, at 12:13 PM, Kate <[email protected]> wrote: > They are not coming from the same IP. They are mostly in Europe but there are > no subnets. > > There are hundreds of them and google only lets you block 100. > > eg > 132.65.240.100 > 133.15.59.2 > 193.136.19.13 > 139.165.12.211 > 193.166.167.5 > 141.219.252.133 > 200.17.202.195 > 195.130.124.1 > 193.1.201.27 > 138.48.3.202 > 136.159.220.40 > 138.251.214.78 > > > all these and more within a minute. > > They are all different. > > Kate > > > > On Thursday, August 9, 2012 9:55:29 AM UTC-4, alex wrote: > Kate, > > If barryhunter is right and all the IPs are coming from the same ISP anyway, > you can simply block the whole subnetwork ranges of that ISP (at least > temporary) using dos.yaml: > https://developers.google.com/appengine/docs/python/config/dos > > It'll be pain in the ass updating the file every time you encounter new > subnets but at least you could probably save some quota 'till you move > somewhere else or figure something out. > > -- alex > > On Thursday, August 9, 2012 1:59:57 PM UTC+2, Kate wrote: > Hi Sergey, > Here is a typical example > 2012-08-09 06:51:16.597 / 302 30ms 0kb curl/7.18.2 (i386-redhat-linux-gnu) > libcurl/7.18.2 NSS/3.12.2.0 zlib/1.2.3 libidn/0.6.14 libssh2/0.18 > 202.125.215.12 - - [09/Aug/2012:04:51:16 -0700] "HEAD / HTTP/1.1" 302 153 - > "curl/7.18.2 (i386-redhat-linux-gnu) libcurl/7.18.2 NSS/3.12.2.0 zlib/1.2.3 > libidn/0.6.14 libssh2/0.18" "aussieclouds.appspot.com" ms=31 cpu_ms=0 > api_cpu_ms=0 cpm_usd=0.000049 instance=00c61b117c2f994812ed63184c9c5544dea738 > > But the ip address varies. My code forces 302 response. Before I added the > code they were throwing errors head method not found. But even though I am > doing the 303 I am still getting front end time exceeded and these requests > are taking up about 95% of my quota. So to keep the site alive I would have > to pay for them, I have lost most of my European and Australian visitors > because the site is down every night during those places daylight hours. > Obviously I can't continue like this and so will have to move to a provider > capable of blocking these requests, > > > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/google-appengine/-/g_yrLQPI49cJ. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
