IP Reputation

What It Means

The IP address that initiated this request is known to have participated in other recent attacks across the internet.

Why It Matters

IP reputation scoring draws on threat intelligence from thousands of sites. When an IP address has been involved in attacks elsewhere, it is very likely to be probing or attacking your site as well. Blocking these requests preemptively stops a large volume of automated attacks.

Common Triggers

Requests from IP addresses flagged in global threat intelligence feeds, IPs associated with botnets, compromised servers used as attack infrastructure, or addresses that have recently scanned multiple sites for vulnerabilities.

What To Do

These blocks are based on real-time threat data and are almost always accurate. If a legitimate user is affected (for example, because they are on a shared network with a compromised device), they can try again from a different network. You can also add their specific IP to your IP Allowlist if you are confident it is safe.