Google App Engine Security Scanner gone crazy - google-app-engine

A couple of times I've noticed strange activity with our GAE demo app. I'm seeing lots of activity in the developer console and also lots of hits on the signin page with Google Analytics.
The demo app shouldn't experience much activity. We also have a test app and production app and they don't exhibit the activity. We haven't turned on the Security Scanner for those sites.
At first I was suspicious, thinking that someone was trying to hack into the demo site. After investigating it seemed that the Security Scanner may be the culprit. The first time I stopped the scan, the activity stopped. But a couple of days ago some strange activity occurred again. It looked like a security scan had been running for days. So, I killed it and also deleted the Security scan. However, the activity persists.
According to Google Analytics hits seem to come from specific geographical regions.
Any ideas as to how to really kill the Security Scanner? Or is this activity something else?

Related

GAE not starting

i can;t deploy app to GAE anymore.
App deploy was always stuck with time out.
Some days ago app was working fine. I was able to deploy. I'm sure.
I pickup old version, just to eliminate possibility that something wrong with app
I try to deploy with all reasonable parameters.
I try delete all services (except default which i can't delete, however i uploaded basic one line app)
I already try most of advice which i found on web
I try to disable App engine.. It failed, however after some time i was able to Disable it.
Now i'm not able to enable GAE.. i see folowing error:
ERROR: (gcloud.app.deploy) Unable to deploy to application [**************] with status [USER_DISABLED]: Deploying to stopped apps is not allowed.
Any advice is welcome:
- How to enable GAE
- How to avoid time outs during deploy App to GAE
Thanks a lot
The public issue tracker is a good place to put bugs and/or feature requests. For faster and more urgent issues, contact the Google Cloud Platform support team directly and they will be able to assist you.
Your issue could also simple be a propagation delay, so if in 24/48 hours and you still can't, then it's likely a bug. Furthermore, you can always deploy to another project if it's all the same to you.

How do I get a Google Admin to Fix my Project Console?

Short of paying $150/month so I can actually submit a ticket, what can I do to get Google's attention? I've seen other people get help for what appears to be the exact same issue.
I uploaded a new (small) app to Google App Engine (GAE), and the Applications Settings page shows an error under Cloud Integration ("An error occurred when creating the project. Please retry").
I've retried over a period of days, but it tries for a while, then reports another failure. I've asked questions of StackOverflow, and in the GAE issues forum, to no response.
Try to get hold of the people from Google Developer relations here, in the relevant Google+ communities or on Google groups.
If it can bring you any comfort: paying the $150 does not help you much - we have the subscription.
If you have a second Google Apps domain, replicate the issue by switching domains and recreating the project from scratch. Then if the error occurs again, post that it occurs in 2 or more cloud.google.com accounts with separate domains. This should help show this is not a one off error and requires investigation.
If it does not occur in the second domain, save your data, delete your project and recreate with a different project name and number.
-ExGenius

Timeouts refreshing Google oauth token in GAE app

I have a GAE app that periodically requests a user's activities from G+. I'm using the google oauth client api for java.
This has been working fine for months with literally no code changes (I'll post the code if required, it's all taken straight from the oauth client project examples, using GoogleAuthorizationCodeFlow).
However, a couple of days ago this changed. Now, without fail from the GAE instance, I get this exception during token refresh:
java.net.SocketTimeoutException: Timeout while fetching URL: https://accounts.google.com/o/oauth2/token
at com.google.appengine.api.urlfetch.URLFetchServiceImpl.convertApplicationException(URLFetchServiceImpl.java:141)
at com.google.appengine.api.urlfetch.URLFetchServiceImpl.fetch(URLFetchServiceImpl.java:43)
at com.google.api.client.extensions.appengine.http.UrlFetchRequest.execute(UrlFetchRequest.java:77)
at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1009)
at com.google.api.client.auth.oauth2.TokenRequest.executeUnparsed(TokenRequest.java:299)
at com.google.api.client.auth.oauth2.TokenRequest.execute(TokenRequest.java:323)
at com.google.api.client.auth.oauth2.Credential.executeRefreshToken(Credential.java:586)
at com.google.api.client.auth.oauth2.Credential.refreshToken(Credential.java:505)
at com.google.api.client.auth.oauth2.Credential.intercept(Credential.java:266)
Now this still works fine from my local machine. There are no reported quota issues on the GAE dashboard or on the Google APIS console for this app. Billing is enabled for the Google APIs console project, but not the GAE app.
I note there's a similar looking issue in a python app reported here, but that has no responses so far.
This has been happening continuously for a couple of days - the app tries once an hour for a hundred or so different users. If I limit the app to only perform this for a single user it still occurs.
Here is what I've noticed:
the service started working for me two days in a row at about 10:30 pm and then stopped working again next day at about 8am(both Saturday and Sunday this weekend: June 8-9 2013). Really looks like high load issue.
Will hope that Google fix it soon.
I absolutely made no changes in my code on app engine server. It just started working and then stopped working.
P.S. also it looks like it takes always about 40 seconds before server gets SocketTimeoutException every time I try to sign in with Google plus.
P.P.S. and yes it works on my local instance of Google App Engine.
We are still experiencing the same problem: at around 1pm-2pm GMT of every day the OAuth2 refresh token method starts failing with a time out error, for 10-14 ours. After that time it works again.
A similar issue is posted here: https://code.google.com/p/google-glass-api/issues/detail?id=99.
Lorenzo
Update: it seems the problem has been solved.
See https://groups.google.com/forum/?fromgroups#!topic/google-appengine-downtime-notify/TqKVL9TNq2A
I think it may have been due to this issue:
The problem with Google App Engine URL Fetch service to Google
Accounts authentication endpoints was resolved as of 5:15 PM
US/Pacific on June 7, 2013. We apologize for the inconvenience and
thank you for your patience and continued support. Please rest assured
that system reliability is a top priority at Google, and we are making
continuous improvements to make our systems better.
https://groups.google.com/forum/?fromgroups#!topic/google-appengine-downtime-notify/TqKVL9TNq2A
This timeout issue is happening consistently for on two app engine instances running my app anyCloud and staging.anycloud.co). I can not get an access token or refresh an existing one and consistent with the other posters, the same code works fine when running in a localhost dev environment.

appengine dashboard is not showing any stat for a couple of hours

I am testing out my appengine app and I have not been able to see any stat on the Dashboard for a couple of hours already. There is nothing on the graph. The app has been running for a while (79% of a frontend instance hours) The URIs being called from has been completely blank.
I've experienced some lags before, but never at that level. Perhaps you could get in touch with the GAE team through a production issue.

GAE suddenly can't access my apps!

I'm using Google App Engine for a number of sites I host.
As of a short time ago GAE won't allow me to login via the usual.
https://appengine.google.com/a/websitename.com
It keeps telling me that I'm "Unauthorized." I.e I can't access the dashboard for any of my apps!
This was working fine as of a few days ago and I've not made any changes.
Is there any way that I can sort this out? I.e. can I remotely add a role to my app for example. Is there another way of logging into the dashboard etc?
Any help would be fantastic as this is really causing me serious problems.
Thanks in advance,
Matt
If you're trying to reach the app dashboard, the proper url format for the moment is https://appengine.google.com/dashboard?&app_id=some_app_id. That being said, you shouldn't depend too much on that as it's an implementation detail that's subject to change whenever.
Next time, try visiting http://appengine.google.com/ for the list of apps your account has access to.

Resources