I am hosting one of the projects on Heroku Standard 2x dynos
plan. Everything was working alright until recently I started to get notifications from our uptime checker that website is down. After closer investigation of logs I noticed that most of the requests are coming from one IP. Apparently, all the requests are coming from some automated script or tool which is trying all the possible JS and SQL injections.
After manually blocking IP in Nginx config everything went back to normal.
My question is how I can automatically prevent it in the future and does Heroku really does not have simple protection from DOS (not even DDoS) if there are hundreds of requests per second from one IP?