IP address
Search at other sites: 
.000185.158.138.2
Shodan(more info)
Passive DNS
- Warden events (1)
- 2026-09-07
-
- AnomalyTraffic (node.6a1878): 1
- Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-09-07 01:19:12}
- Percent days seen: 3 %
- Networks: DATAIMPULSE, NOVADA
- Details: https://layer3intel.com/context/185.158.138.2
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | — |
- Origin AS
- AS142594 - SPEEDYPAGELTD-AS-AP
- BGP Prefix
- 185.158.138.0/24
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.158.136.0 - 185.158.139.255
- last_activity
- 2026-09-07 01:19:30
- last_warden_event
- 2026-09-07 01:19:30
- rep
- 0.0003736034792970466
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 53, 80, 110, 443, 465, 2079, 2082, 2086, 2087, 3307, 4190
- Tags: starttls
- CPEs: cpe:/a:exim:exim:4.99.5, cpe:/a:openresty:lua-nginx-module:1.31.1.1, cpe:/a:f5:nginx, cpe:/a:openresty:openresty:1.31.1.1, cpe:/a:openbsd:openssh:8.0
- ts_added
- 2026-09-07 14:21:22.402000
- ts_last_update
- 2026-09-19 14:21:30.369000
Warden event timeline
DShield event timeline