---
title: Blocking traffic from a specific IP address.
description: Learn how to block traffic from a specific IP address.
url: /kb/guide/traffic-spikes
canonical_url: "https://vercel.com/kb/guide/traffic-spikes"
last_updated: 2025-11-10
authors: DX Team
related:
  - /docs/security/vercel-waf/examples
  - /docs/security/vercel-waf/custom-rules
install_vercel_plugin: npx plugins add vercel/vercel-plugin
---

**Scenario**: When reviewing your site's traffic in the live monitor of your project's **Firewall** tab, you notice a traffic spike coming from the IP address `11.22.33.44`.

> You view the traffic by IP Address by selecting **Allowed Requests** from the traffic grouping drop-down and **IP Address** for the secondary drop-down

1. Select your project from the Vercel [dashboard](/dashboard) and select the **Firewall** tab.
   
2. Scroll down to the **IP Blocking** section and select the **\+ Add IP** button.
   
3. In the **Configure New Domain Protection** modal, type `11.22.33.44` for the IP Address field and match the Host field with the domain of your production deployment.
   
4. Select the **Create IP Block Rule** button.
   
5. Apply the changes:
   
   - When you make any change, you will see a **Review Changes** button appear or update on the top right with the number of changes requested
     

- Select **Review Changes** and review the changes to be applied
  
- Select **Publish** to apply the changes to your production deployment
  

1. Review the live monitor. The traffic from `11.22.33.44` should now be zero.
   

## More resources

- [WAF examples](/docs/security/vercel-waf/examples)
  
- [WAF custom rules](/docs/security/vercel-waf/custom-rules)