Block IP based on previous requests

[t1l3 (Tib)]

Hello,

I would like to know if it’s possible to ban IPs based on the URLs they visit. In my logs, I see a lot of malicious traffic, with calls to /wp-admin, wp-config.php, etc. My site is not a WordPress site, not even php, and I would like to know if it is possible to block these bots once such URLs are accessed.

Thanks!

[swarnava (Swarnava Sengupta)]

Hi, You can try this:

“Function Invocations” usage and optional catch-all

Hi, You can block these requests via a Vercel WAF rule: WAF Custom Rules For example you can create a rule that blocks or challenges traffic using the contains “.php”: [image] We wouldn’t be able to design these exact queries for you, but it should be relatively simple using the above example to create a custom rules for each unwanted file type/request.