How can I configure Vercel WAF on my app? Seeing several suspicious logs

(edited)

Hi to all,

Everyday when I see error logs I find these logs

Screenshot 2024-09-16 at 17.47.01

can someone tell me how to stop this we are not using PHP website or Wordpress we have Next Js app

Vercel Alum

Hi, ! Welcome to the Vercel Community

You could try using Vercel WAF, specifically setting up:

IP blocking: Learn how to configure IP blocking

Custom rules: Learn how to configure custom rules for your project

Managed rulesets: Learn how to enable managed rulesets for your project (Enterprise plan)

https://vercel.com/docs/security/vercel-waf#traffic-control

Let us know how you get on!

Hi pawlean,

Thank your for the response, but is there any way to identify IP address of that person from Vercel dashboard I want to block exact IP from that request.

Vercel Alum

Hi, !

Thank you for your patience

To find IP addresses to block on Vercel, you can use the X-Forwarded-For header, which provides the IP address of the client making the request. You can then look for the X-Forwarded-For header in the logs. This header will contain the IP address of the client.

https://vercel.com/docs/edge-network/headers#x-forwarded-for

You can create middleware in your application to log the X-Forwarded-For header.

import { NextResponse } from 'next/server'; import type { NextRequest } from 'next/server';

 export function middleware(req: NextRequest) {
   const clientIp = req.headers.get('x-forwarded-for') || req.ip;
   console.log('Client IP:', clientIp);
   return [NextResponse.next](https://nextresponse.next)();
 }

https://vercel.com/docs/functions/edge-middleware/middleware-api

Let us know how you get on!

Vercel Alum

We now have a WAF template in case it is helpful, !

https://vercel.com/templates/vercel-firewall/emergency-redirect-firewall-rule

Vercel

Emergency Redirect Firewall Rule

Use this template to quickly implement an emergency redirect rule with the Vercel Web Application Firewall (WAF).

Vercel Alum

We're hosting this event next week on protecting Vercel sites from common attacks, in case it's helpful to you https://community.vercel.com/t/how-to-protect-your-vercel-site-from-common-attacks/4652

Vercel Community

Topic | Vercel Community

Connect, learn, share projects, and get community support

This topic is closed. It no longer accepts new replies.

Hi, !

Thank you for your patience

https://vercel.com/docs/edge-network/headers#x-forwarded-for

You can create middleware in your application to log the X-Forwarded-For header.

import { NextResponse } from 'next/server'; import type { NextRequest } from 'next/server';

 export function middleware(req: NextRequest) {
   const clientIp = req.headers.get('x-forwarded-for') || req.ip;
   console.log('Client IP:', clientIp);
   return [NextResponse.next](https://nextresponse.next)();
 }

https://vercel.com/docs/functions/edge-middleware/middleware-api

Let us know how you get on!