API based on user IP address

Question

I developed an API to get all the data.

The site do not have a user registration system or anything to identify the user making a call to the API. If I could identi

Answer 1

It's not a good idea to ban an IP address for many reasons. And anyways, a hacker can spoof IP addresses, so this technique is useless.

What you can do is throttle the API calls based on the IP. i.e. limit the numbers of calls per IP per second.

You might find this helpful: http://blog.programmableweb.com/2007/04/02/12-ways-to-limit-an-api/