IP address
Shodan(more info)

Passive DNS

- DShield reports (IP summary, reports)
- 2026-08-28
- Number of reports: 12
- Distinct targets: 3
- 2026-09-01
- Number of reports: 19
- Distinct targets: 5
- 2026-09-02
- Number of reports: 19
- Distinct targets: 5
- Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-09-03 09:32:32}
- Percent days seen: 100 %
- Networks: NETNUT, BOTTINGTOOLS, BIRDPROXIES, 711PROXY, LEMONBRIGHT, PROXYWING, BRIGHTDATA, THORDATA, FLOPPYDATA, THUNDERPROXY, DATAIMPULSE, MARSPROXIES, PROXY4U, AKE.NET, NOVADA, VITALEXCLUSIVE, GEEKPROXY, PSBPROXY, VPROXY
- Details: https://layer3intel.com/context/184.185.165.9
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan |
- Origin AS
- AS22773 - ASN-CXA-ALL-CCI-22773-RDC
- BGP Prefix
- 184.185.160.0/20
- geo
- United States, Scottsdale
- 🕑 America/Phoenix
- hostname
- wsip-184-185-165-9.ph.ph.cox.net
- hostname_class
- ['isp', 'ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 184.176.0.0 - 184.191.255.255
- rep
- 2.7333146897401406e-05
- reserved_range
- 0
- ts_added
- 2026-08-29 05:08:09.716000
- ts_last_update
- 2026-09-04 05:15:17.727000
Warden event timeline
DShield event timeline

