well, while you're notifying planetlab and whatnot you could create and upload a dos.yaml for the time being with a content similar to this:
blacklist: - subnet: 132.65.0.0/16 - subnet: 133.0.0.0/8 description: somewhere in china - subnet: 136.159.0.0/16 - subnet: 138.250.0.0/15 - subnet: 138.48.0.0/16 - subnet: 139.165.0.0/16 - subnet: 141.219.252.0/24 - subnet: 193.1.0.0/16 description: planetlab - subnet: 193.136.16.0/24 - subnet: 193.166.167.0/24 - subnet: 195.130.124.0/22 - subnet: 200.17.192.0/19 - put that file in your app root dir and do something like this from a terminal: "appcfg.py update_dos ." On Thursday, August 9, 2012 6:13:14 PM UTC+2, Kate wrote: > > They are not coming from the same IP. They are mostly in Europe but there > are no subnets. > > There are hundreds of them and google only lets you block 100. > > eg > > 132.65.240.100 > 133.15.59.2 > 193.136.19.13 > 139.165.12.211 > 193.166.167.5 > 141.219.252.133 > 200.17.202.195 > 195.130.124.1 > 193.1.201.27 > 138.48.3.202 > 136.159.220.40 > 138.251.214.78 > > > all these and more within a minute. > > They are all different. > > Kate > > > > On Thursday, August 9, 2012 9:55:29 AM UTC-4, alex wrote: >> >> Kate, >> >> If barryhunter is right and all the IPs are coming from the same ISP >> anyway, you can simply block the whole subnetwork ranges of that ISP (at >> least temporary) using dos.yaml: >> https://developers.google.com/appengine/docs/python/config/dos >> >> It'll be pain in the ass updating the file every time you encounter new >> subnets but at least you could probably save some quota 'till you move >> somewhere else or figure something out. >> >> -- alex >> >> On Thursday, August 9, 2012 1:59:57 PM UTC+2, Kate wrote: >>> >>> Hi Sergey, >>> >>> Here is a typical example >>> 2012-08-09 06:51:16.597 / 302 30ms 0kb curl/7.18.2 >>> (i386-redhat-linux-gnu) libcurl/7.18.2 NSS/3.12.2.0 zlib/1.2.3 >>> libidn/0.6.14 libssh2/0.18 >>> 202.125.215.12 - - [09/Aug/2012:04:51:16 -0700] "HEAD / HTTP/1.1" 302 >>> 153 - "curl/7.18.2 (i386-redhat-linux-gnu) libcurl/7.18.2 >>> NSS/3.12.2.0zlib/1.2.3 libidn/0.6.14 libssh2/0.18" " >>> aussieclouds.appspot.com" ms=31 cpu_ms=0 api_cpu_ms=0 cpm_usd=0.000049 >>> instance=00c61b117c2f994812ed63184c9c5544dea738 >>> >>> But the ip address varies. My code forces 302 response. Before I added >>> the code they were throwing errors head method not found. But even though I >>> am doing the 303 I am still getting front end time exceeded and these >>> requests are taking up about 95% of my quota. So to keep the site alive I >>> would have to pay for them, I have lost most of my European and Australian >>> visitors because the site is down every night during those places daylight >>> hours. Obviously I can't continue like this and so will have to move to a >>> provider capable of blocking these requests, >>> >>> -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/vD82ECZ5npEJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
