Deployment thumbnail 403 - DDoS Mitigation blocking screenshot service

Hi,

My deployment thumbnails in the Vercel dashboard are showing “Error: Forbidden (403)”, but my live site and custom domain work perfectly fine.

**Project:** danmu-api

**Framework:** Node.js

**Plan:** Hobby

**What I checked:**

- Vercel Authentication: Disabled

- Bot Protection: Inactive

- Custom Firewall Rules: 0

**Firewall Traffic logs show DDoS Mitigation is blocking these AWS IPs:**

- 18.145.252.166 (Amazon.com Inc, AS16509)

- 52.53.151.3 (Amazon.com Inc, AS16509)

- 54.67.140.255 (Amazon.com Inc, AS16509)

These appear to be Vercel’s own thumbnail/screenshot service being blocked by DDoS Mitigation.

This was working fine before and started happening recently. Since I’m on Hobby plan, I don’t have access to System Bypass Rules to whitelist these IPs manually.

Could someone help unblock these IPs or reset the DDoS Mitigation rule for my project?

Thank you.

3 posts were merged into an existing topic: Vercel AI Gateway returns 403 Forbidden access_denied for all requests