IP address


.001158.173.246.131
Shodan(more info)
Passive DNS
Tags: Residential proxy

Threat categories

TLRoleCategoryDetails
25 src scan port: 23

Warden events (35)
2026-08-15
ReconScanning (node.9c1411): 1
2026-08-11
AnomalyTraffic (node.6a1878): 3
ReconScanning (node.9c1411): 1
2026-08-10
AnomalyTraffic (node.6a1878): 25
2026-08-09
AnomalyTraffic (node.6a1878): 5
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-08-24 17:11:26}
Percent days seen: 53 %
Networks: OXYLABS, NETNUT, BOTTINGTOOLS, BIRDPROXIES, GOPROXIES, PROXYEMPIRE, 711PROXY, MASKIFY, KOOKEY, PROXYWING, THORDATA, FLOPPYDATA, THUNDERPROXY, 9PROXY, NOVADA, B2PROXY, CLIPROXY, TALORDATA, RAPIDPROXY, IPFLY
Details: https://layer3intel.com/context/158.173.246.131
Origin AS
AS137409 - GSLNETWORKS-AS-AP
BGP Prefix
158.173.246.0/24
geo
Cambodia, Phnom Penh
🕑 Asia/Phnom_Penh
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
158.173.0.0 - 158.173.255.255
last_activity
2026-08-15 18:11:18
last_warden_event
2026-08-15 18:11:18
rep
0.0005604052189455144
reserved_range
0
Shodan's InternetDB
Open ports: 443, 500, 1234, 4000, 8080
Tags: vpn
CPEs:
ts_added
2026-08-09 12:50:59.904000
ts_last_update
2026-08-26 12:51:00.269000

Warden event timeline

DShield event timeline