Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /robots.txt | 2026-09-08 18:13 UTC
ThreatBook Intelligence: iot_device,vpn_proxy more details on https://threatbook.io/ip/106.8.139.67
2026-04-21 00:23:19 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Faqts%2F202601%2Ft20260130_1418195.html","content_type":"application ...
show moreThreatBook Intelligence: iot_device,vpn_proxy more details on https://threatbook.io/ip/106.8.139.67
2026-04-21 00:23:19 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Faqts%2F202601%2Ft20260130_1418195.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, */*; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"106.8.139.67:59177","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"}
show less
ThreatBook Intelligence: iot_device,vpn_proxy more details on https://threatbook.io/ip/106.8.139.67
2026-04-14 03:11:52 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fjtwfbgt%2F202604%2Ft20260407_1466084.html","content_type":"applicat ...
show moreThreatBook Intelligence: iot_device,vpn_proxy more details on https://threatbook.io/ip/106.8.139.67
2026-04-14 03:11:52 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fjtwfbgt%2F202604%2Ft20260407_1466084.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, */*; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["76"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"106.8.139.67:52303","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"}
2026-04-14 02:57:47 /portrait.js
show less
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
