This IP address has been reported a total of
30
times from
28 distinct
sources.
8.235.25.66 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
Switzerland
with 3
reports;
Finland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
20
times;
Brute-Force
8
times;
Hacking
5
times;
Bad Web Bot
5
times;
Port Scan
3
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
XORP (haproxy): 90x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show moreXORP (haproxy): 90x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
(mod_security) mod_security (id:210410) triggered by 8.235.25.66 (US/United States/66.25.235.8.bc.go ...
show more(mod_security) mod_security (id:210410) triggered by 8.235.25.66 (US/United States/66.25.235.8.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
http-probing - IP: 8.235.25.66 - time="2026-10-14T09:41:22+02:00" level=info msg="(555f66b4f6a74558 ...
show morehttp-probing - IP: 8.235.25.66 - time="2026-10-14T09:41:22+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 8.235.25.66 (US/396982) : 4h ban on Ip 8.235.25.66" module=db
show less
Web App Attack
Anonymous
2026-10-14T09:33:35.305698+02:00 aion wordpress[408580]: Blocked user enumeration attempt from 8.235 ...
show more2026-10-14T09:33:35.305698+02:00 aion wordpress[408580]: Blocked user enumeration attempt from 8.235.25.66
...
show less
(xmlrpc) Failed xmlrpc access from 8.235.25.66 (US/United States/66.25.235.8.bc.googleusercontent.co ...
show more(xmlrpc) Failed xmlrpc access from 8.235.25.66 (US/United States/66.25.235.8.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 11065
events: 11
created_at ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 11065
events: 11
created_at: 2026-10-14T07:12:10Z
message: Ip 8.235.25.66 performed 'crowdsecurity/http-probing' (11 events over 1.698788848s) at 2026-10-14 07:12:10.148299173 +0000 UTC
target_uri: ["//wp-includes/ID3/license.txt","//feed/","//xmlrpc.php?rsd","//blog/wp-includes/wlwmanifest.xml","//web/wp-includes/wlwmanifest.xml","//wordpress/wp-includes/wlwmanifest.xml","//wp/wp-includes/wlwmanifest.xml","//2020/wp-includes/wlwmanifest.xml","//2019/wp-includes/wlwmanifest.xml","//2021/wp-includes/wlwmanifest.xml","//shop/wp-includes/wlwmanifest.xml"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"]
show less
[Wed Oct 14 08:58:06.141214 2026] [php:error] [pid 2944550] [client 8.235.25.66:51731] script '/var/ ...
show more[Wed Oct 14 08:58:06.141214 2026] [php:error] [pid 2944550] [client 8.235.25.66:51731] script '/var/www/html/xmlrpc.php' not found or unable to stat
[Wed Oct 14 09:05:32.216087 2026] [php:error] [pid 2947729] [client 8.235.25.66:55934] script '/var/www/html/xmlrpc.php' not found or unable to stat
[Wed Oct 14 09:05:48.597730 2026] [php:error] [pid 2947726] [client 8.235.25.66:51308] script '/var/www/html/xmlrpc.php' not found or unable to stat
...
show less
