When you say the IP address varies, does the address seem to be completely random, or do the IPs all belong to a single/similar network? In other words, does the first part of one IP address the same as the first part of another sender IP address?
App Engine's current anti-DOS system only allows blocking by IP addresses, not user agents, but if you need this functionality you can try configuring a reverse proxy such as Cloudflare: http://blog.cloudflare.com/top-tips-for-new-cloudflare-users/ . Cloudflare's reverse proxy can filter requests based on multiple criteria and should help cut down on junk requests. ----------------- -Vinny P Technology & Media Consultant Chicago, IL App Engine Code Samples: http://www.learntogoogleit.com On Thu, Dec 25, 2014 at 1:30 PM, <[email protected]> wrote: > A certain spambot makes periodic requests to my app in 10-minute intervals > at 20/requests each time. Throughout the course of the day, this amounts > to almost 3,000 requests and has been tremendously straining my instance > hours resources. The user agent of the bot is: > > "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0" > > This bot makes requests that appear to be normal user requests and each > time, the IP address varies - so I cannot blacklist by IP. I am currently > returning a 503 access denied server error but the bot continues to make > the requests on schedule, 20 at a time. Can I block http requests by user > agent rather than IP? Please help, I cannot continue the project while > servicing up to 3,000 invalid requests to single bot. Thank you. > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/d/optout.
