This IP address has been reported a total of
3
times from
2 distinct
sources.
54.225.15.11 was first reported on
August 23rd 2025 , and the most recent report was
6 days ago .
In the last 60 days, the only reporter location was:
Germany
with 1
report.
The only category in these recent reports was:
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฉ๐ช
LRob
2026-10-07 09:31:53
(6 days ago)
Abusive crawler | ua: Mozilla/5.0 (compatible; proximic; +https://www.comscore.com/Web-Crawler) | pa ...
show more
Abusive crawler | ua: Mozilla/5.0 (compatible; proximic; +https://www.comscore.com/Web-Crawler) | path: /wp-json/contact-form-7/v1/contact-forms/660/feedback/schema
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-27 20:46:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 54.225.15.11 (ec2-54-225-15-11.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 54.225.15.11 (ec2-54-225-15-11.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 16:46:01.812498 2026] [security2:error] [pid 1793:tid 1793] [client 54.225.15.11:38398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rkstewart.com"] [uri "/.git/config"] [unique_id "akA2ifVdVc7aabpJsiLZjAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-08-23 17:46:06
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 54.225.15.11 (ec2-54-225-15-11.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 54.225.15.11 (ec2-54-225-15-11.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 13:46:01.772084 2025] [security2:error] [pid 23455:tid 23455] [client 54.225.15.11:46784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.futureproductionsonline.com"] [uri "/sftp-config.json"] [unique_id "aKn-WZV7u6aaiOuMYAN8HgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
3
of 3 reports