176.65.149.236 | UnwantedIP

Threat LevelCRITICAL86/1002 rule types across 2 attack categories

142 incidents · 2 rule types · active attacker + blocklisted · persistent 54-day campaign · seen 6h ago

PTR	176.65.149.236.ptr.pfcloud.network
Org / ASN	Pfcloud UG
Country	🇳🇱 The Netherlands
City	Eygelshoven, Limburg
Timezone	Europe/Amsterdam

Attack Analysis

🇳🇱 Netherlands · Kerkrade · 51396 · Pfcloud UG

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (142)

Date	Severity	Description
14 Jul 2026 - 13:18	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
14 Jul 2026 - 05:38	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
12 Jul 2026 - 13:22	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
12 Jul 2026 - 11:36	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
12 Jul 2026 - 10:31	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
12 Jul 2026 - 01:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 36
12 Jul 2026 - 00:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jul 2026 - 10:48	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
10 Jul 2026 - 09:09	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
10 Jul 2026 - 06:50	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 36
9 Jul 2026 - 21:33	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
9 Jul 2026 - 15:28	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
9 Jul 2026 - 01:22	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
9 Jul 2026 - 01:21	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 22:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 20:13	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 18:08	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 11:58	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 01:24	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jul 2026 - 00:11	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35

Report for IP: 176.65.149.236

Attack Analysis

Reports (142)

Related IPs — Same /24 Block (176.65.149.0/24)