This IP address has been reported a total of
82
times from
12 distinct
sources.
54.209.223.239 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 40
reports;
United States of America
with 32
reports;
Germany
with 4
reports.
The most common categories in these recent reports were:
Bad Web Bot
53
times;
Exploited Host
32
times;
DDoS Attack
31
times;
Web App Attack
29
times;
Hacking
4
times;
Other
11
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this a ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Not following 301 redirects — wasted requests | method: GET | path: /apps/aProposAppsAndroid.php | u ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /apps/aProposAppsAndroid.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15 | 2026-10-02 19:26 UTC
show less
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET ...
show moreTriggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /produtos/durata-2-0-tsi-speed
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
HTTP application-layer DoS / botnet traffic from 54.209.223.239: repeated high-cost dynamic page and ...
show moreHTTP application-layer DoS / botnet traffic from 54.209.223.239: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this a ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
HTTP application-layer DoS / botnet traffic from 54.209.223.239: repeated high-cost dynamic page and ...
show moreHTTP application-layer DoS / botnet traffic from 54.209.223.239: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this a ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 54.209.223.239: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
