176.65.149.236 | UnwantedIP

Threat LevelCRITICAL86/1002 rule types across 2 attack categories

142 incidents · 2 rule types · active attacker + blocklisted · persistent 54-day campaign · seen 6h ago

PTR	176.65.149.236.ptr.pfcloud.network
Org / ASN	Pfcloud UG
Country	🇳🇱 The Netherlands
City	Eygelshoven, Limburg
Timezone	Europe/Amsterdam

Attack Analysis

🇳🇱 Netherlands · Kerkrade · 51396 · Pfcloud UG

IDS: Blocklist — Spamhaus DROP

This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (142)

Date	Severity	Description
15 Jun 2026 - 01:37	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
14 Jun 2026 - 02:24	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
14 Jun 2026 - 01:25	high	IDS: Blocklist — Spamhaus DROP listed IP
14 Jun 2026 - 01:25	medium	IDS: Suricata alert — ET SCAN Zmap User-Agent (Inbound)
14 Jun 2026 - 01:25	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 36
13 Jun 2026 - 23:19	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
13 Jun 2026 - 18:02	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
13 Jun 2026 - 15:29	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
13 Jun 2026 - 11:58	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
13 Jun 2026 - 00:13	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 22:25	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 19:30	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 17:19	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 14:59	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 11:26	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 06:29	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
11 Jun 2026 - 05:28	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
10 Jun 2026 - 21:52	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
10 Jun 2026 - 09:39	high	IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 35
8 Jun 2026 - 11:14	high	IDS: Blocklist — Spamhaus DROP listed IP

Report for IP: 176.65.149.236

Attack Analysis

Reports (142)

Related IPs — Same /24 Block (176.65.149.0/24)