I have the domain of some organization that requests my site too much. I want to restrict their access - but how? We only have the domain of the requester sfasu.edu . The QA of our team is using tool like https://www.whatismyip.com/dns-lookup/ to detect the IP of that domain, then having the IP we add some throttling rule to restrict it. But Im not sure if the IP I obtain is static and wont change tomorrow.
I guess my question is: Is this approach reliable to filter/throttle requests having their domain like sfasu.edu .
Moreover - what if there are 1 000 000 users using that same domain/IP address but only one of them is abusing my site (by issuing too many requests). It could be thousands of clients behind NAT.
To me this approach is suspicious.