The incoming requests originating IP Address should be in the request’s “X-Forwarded-For” header, so you could check that for the IP you want to ban and if you see the one you don’t want you could then return an appropriate response. You could also use something like https://www.npmjs.com/package/express-ip-block if you’re using Express.