176.65.149.236 | UnwantedIP

Threat LevelCRITICAL86/1002 rule types across 2 attack categories

142 incidents · 2 rule types · active attacker + blocklisted · persistent 54-day campaign · seen 6h ago

PTR	176.65.149.236.ptr.pfcloud.network
Org / ASN	Pfcloud UG
Country	🇳🇱 The Netherlands
City	Eygelshoven, Limburg
Timezone	Europe/Amsterdam

Attack Analysis

🇳🇱 Netherlands · Kerkrade · 51396 · Pfcloud UG

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (142)

Date	Severity	Description
24 Jul 2026 - 22:32	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
24 Jul 2026 - 21:06	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
24 Jul 2026 - 13:57	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
24 Jul 2026 - 00:41	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
23 Jul 2026 - 20:56	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
23 Jul 2026 - 19:17	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
23 Jul 2026 - 09:42	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
23 Jul 2026 - 07:41	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
22 Jul 2026 - 23:22	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
22 Jul 2026 - 10:30	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
22 Jul 2026 - 05:39	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
17 Jul 2026 - 15:14	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
17 Jul 2026 - 09:36	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
17 Jul 2026 - 02:24	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
15 Jul 2026 - 21:20	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
15 Jul 2026 - 18:36	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
15 Jul 2026 - 14:11	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
15 Jul 2026 - 10:01	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
15 Jul 2026 - 05:29	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
14 Jul 2026 - 20:32	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35

Report for IP: 176.65.149.236

Attack Analysis

Reports (142)

Related IPs — Same /24 Block (176.65.149.0/24)