I have blocked 178.32.0.0/15 in my app's dos.yaml but I've recently noticed that certain requests are getting past the rule. I have included a snippet from the logs below. It shows 178.32.216.193 being refused (http 403) some of the time, but not always (http 200). I've seen this happening for different apps and different blocked IP ranges. Has anyone else seen this?
2014-08-11 22:24:49.541 *200* 21KB 321ms /p/rjcHL1rVqy *178.32.216.193* - - [11/Aug/2014:07:24:49 -0700] "GET /p/rjcHL1rVqy HTTP/1.1" 200 21634 "http://-snip-/p/rjcHL1rVqy"; "Livelapbot/0.1" "-snip-" ms=321 cpu_ms=187 cpm_usd=0.002418 -snip- 2014-08-11 22:56:24.949 *403* 434B 74ms /p/rjcHL1rVqy *178.32.216.193* - - [11/Aug/2014:07:56:24 -0700] "GET /p/rjcHL1rVqy HTTP/1.1" 403 434 "http://-snip-/p/rjcHL1rVqy"; "Livelapbot/0.1" "-snip-" ms=74 cpu_ms=0 -snip- 2014-08-11 23:06:57.427 *200* 21KB 255ms /p/rjcHL1rVqy *178.32.216.193* - - [11/Aug/2014:08:06:57 -0700] "GET /p/rjcHL1rVqy HTTP/1.1" 200 21634 "http://-snip-/p/rjcHL1rVqy"; "Livelapbot/0.1" "-snip-" ms=255 cpu_ms=163 cpm_usd=0.002418 -snip- 2014-08-11 23:51:31.708 *403* 434B 75ms /p/rjcHL1rVqy *178.32.216.193* - - [11/Aug/2014:08:51:31 -0700] "GET /p/rjcHL1rVqy HTTP/1.1" 403 434 "http://-snip-/p/rjcHL1rVqy"; "Livelapbot/0.1" "-snip-" ms=75 cpu_ms=0 -snip- -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/d/optout.
