Deployment paused after DDoS attack

Help
1

Hey,

I’m on the Hobby plan and my project was hit with what appears to be a DDoS attack or automated abuse. Here’s what happened:

  • My domain fuckstats.lol received approximately 12 million requests in under 1 hour (ive included a screenshot as evidence)

  • This is completely abnormal compared to my usual traffic

  • As a result, my deployment was paused (soft-blocked) for exceeding fair-use limits

  • My site now returns This deployment is temporarily paused

  • I have Firewall enabled with bot filter set to “challenge” and AI bots set to “deny”

  • I’m now locked out with no remaining unblock options

So is there any way to recover my deployment without upgrading?

Please let me know asap :frowning:

{2BCC357A-4982-452B-913C-3C424A182334}
{2BCC357A-4982-452B-913C-3C424A182334}1271×498 5.9 KB

2

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: Report Abuse On Vercel

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.

4

I’ve unblocked your project for the next 30 days.

Can you make sure that your project is within the limits and that you review our Vercel Firewall docs?