Report for IP: 176.65.149.188

Threat LevelCRITICAL84/1002 rule types across 2 attack categories
90 incidents · 2 rule types · active attacker + blocklisted · persistent 33-day campaign · seen 2h ago
PTR 176.65.149.188.ptr.pfcloud.network
Org / ASN Pfcloud UG
Country 🇳🇱 The Netherlands
City Eygelshoven, Limburg
Timezone Europe/Amsterdam

Attack Analysis

IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (90)

Date Severity Description
30 Sep 2026 - 00:50 medium IDS: Suricata alert — GPL REMOTE_ACCESS PCAnywhere server response
30 Sep 2026 - 00:50 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
30 Sep 2026 - 00:08 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
29 Sep 2026 - 18:24 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
29 Sep 2026 - 13:06 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
29 Sep 2026 - 11:11 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
26 Sep 2026 - 07:55 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
26 Sep 2026 - 05:56 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
26 Sep 2026 - 05:09 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
25 Sep 2026 - 22:45 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
25 Sep 2026 - 18:47 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
25 Sep 2026 - 12:59 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
25 Sep 2026 - 12:26 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 37
25 Sep 2026 - 09:11 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
25 Sep 2026 - 04:04 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
24 Sep 2026 - 21:06 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
22 Sep 2026 - 01:39 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
21 Sep 2026 - 13:29 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
20 Sep 2026 - 18:14 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
12 Sep 2026 - 22:22 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35