This IP address has been reported a total of
22
times from
16 distinct
sources.
140.143.238.238 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Disregard of robots.txt
--
[05/Jun/2026:23:16:32 +0900] "GET /ip HTTP/1.1" 403 76 "-" "Mozilla/5.0 ...
show moreDisregard of robots.txt
--
[05/Jun/2026:23:16:32 +0900] "GET /ip HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
show less
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/140.143.238.238
2026-05- ...
show moreThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/140.143.238.238
2026-05-12 23:49:14 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxnews.net%2Fyc%2Fztyx%2F202112%2Ft20211204_7362286.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, */*; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Accept-Language":["zh-CN,zh;q=0.9"],"Connection":["keep-alive"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxnews.net"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"140.143.238.238:34540","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"}
show less
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/140.143.238.238
2026-05- ...
show moreThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/140.143.238.238
2026-05-06 00:41:36 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fwww.nxnews.net%2Fyc%2Fztyx%2F202304%2Ft20230414_7918936.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, */*; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Accept-Language":["zh-CN,zh;q=0.9"],"Connection":["keep-alive"],"Content-Length":["77"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://www.nxnews.net"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"140.143.238.238:34302","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"}
2026-05-06 23:49:16 /ip
show less
Web App Attack
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩