This IP address has been reported a total of
28
times from
27 distinct
sources.
13.236.94.221 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 5
reports;
France
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
19
times;
Bad Web Bot
9
times;
Brute-Force
8
times;
Hacking
5
times;
DDoS Attack
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content via rule: /w ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content via rule: /wp-content
show less
CrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /cgi-bin/wp-login.php); first seen 20 ...
show moreCrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /cgi-bin/wp-login.php); first seen 2026-10-27T22:42:07Z, last seen 2026-10-27T22:42:07Z; reported by WOPR honeypot nedry.wopr.systems
show less
(mod_security) mod_security (id:20000010) triggered by 13.236.94.221 (AU/Australia/ec2-13-236-94-221 ...
show more(mod_security) mod_security (id:20000010) triggered by 13.236.94.221 (AU/Australia/ec2-13-236-94-221.ap-southeast-2.compute.amazonaws.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
Anonymous
13.236.94.221 - - [27/Oct/2026:22:08:49 +0000] "GET /wp-login.php HTTP/2.0" 404 170 "-" "Mozilla/5.0 ...
show more13.236.94.221 - - [27/Oct/2026:22:08:49 +0000] "GET /wp-login.php HTTP/2.0" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
13.236.94.221 - - [27/Oct/2026:22:09:34 +0000] "GET /wp-admin.php HTTP/2.0" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.
13.236.94.221 - - [27/Oct/2026:15:45:55 -0400] "GET /wp-content/plugins/revslider/includes/external/ ...
show more13.236.94.221 - - [27/Oct/2026:15:45:55 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 29951 "https://palmetto-trust.com/wp-content/plugins/revslider/includes/external/page/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
13.236.94.221 - - [27/Oct/2026:15:46:00 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 404 29951 "https://palmetto-trust.com/wp-content/plugins/linkpreview/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
13.236.94.221 - - [27/Oct/2026:15:46:18 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 404 29951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
13.236.94.221 - - [27/Oct/2026:15:46:19 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 404 29951 "-" "Mozilla/5.0 (Windows NT 10.0; Wi
...
show less
Web App Attack
Anonymous
HTTP scan of URLS detected through requesting more than 5 non existing (sensative) URLs (url file pa ...
show moreHTTP scan of URLS detected through requesting more than 5 non existing (sensative) URLs (url file paths on the same domain)
show less
