JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.65.148.138

176.65.148.138 was found in our database!

This IP was reported 175 times. Confidence of Abuse is 100%: ?

100%

ISP	Pfcloud UG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51396
Hostname(s)	176.65.148.138.ptr.pfcloud.network
Domain Name	pfcloud.io
Country	🇳🇱 Netherlands
City	Hopel, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.65.148.138

Whois 176.65.148.138

IP Abuse Reports for 176.65.148.138:

This IP address has been reported a total of 175 times from 59 distinct sources. 176.65.148.138 was first reported on November 11th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-01 10:20:35 (6 days ago)	Unauthorized connection	Port Scan Hacking
🇹🇭 Sawasdee	2026-06-01 09:51:07 (6 days ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇭🇰 pengpeng	2026-05-31 00:02:39 (1 week ago)	monitor: on ser162528253480 \| port: 7002 \| ttl: 243 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 7002 \| ttl: 243 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-05-30 16:18:09 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=176.65.148.138; proto=TCP; source_port=53065; target_port=7002; flags=SYN show less	Port Scan
🇩🇪 femboy.cat	2026-05-30 16:10:31 (1 week ago)	Port scan to tcp/7002 from 176.65.148.138	Brute-Force
🇺🇸 xmission.com	2026-05-30 15:42:07 (1 week ago)	Blocked by UFW (TCP on 7002) Source port: 42535 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7002) Source port: 42535 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 176.65.148.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-30 15:12:21 (1 week ago)	Blocked by UFW (TCP on 7002) Source port: 54581 TTL: 236 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7002) Source port: 54581 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 176.65.148.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-05-30 15:09:55 (1 week ago)	Honeypot [uk-production01]: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Windows ... show more Honeypot [uk-production01]: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Accept-Encoding: gzip, deflate; 7002 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-05-30 15:07:07 (1 week ago)	tcp/7002 (6 or more attempts)	Port Scan
🇵🇱 sefinek.net	2026-05-30 15:03:36 (1 week ago)	Honeypot hit: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot hit: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Accept-Encoding: gzip, deflate; 7002 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇪🇸 librebit	2026-05-30 14:52:18 (1 week ago)	Brute force	Brute-Force
🇳🇱 StopAbuse	2026-05-30 14:50:50 (1 week ago)	tcp/7002	Port Scan
🇩🇪 Admins@FBN	2026-05-30 14:48:37 (1 week ago)	FW-PortScan: Traffic Blocked srcport=44050 dstport=7002	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-30 14:34:35 (1 week ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Window ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 7002 GET /cmd.cgi User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Accept-Encoding: gzip, deflate; 7002 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-05-30 13:52:49 (1 week ago)	Blocked by UFW (TCP on 7002) Source port: 57545 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 7002) Source port: 57545 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 176.65.148.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.33.126.224

🇨🇦 54.39.203.12

🇺🇸 52.128.53.134

🇭🇰 45.142.154.43

🇺🇸 45.79.98.252

🇧🇷 189.6.79.65

🇮🇳 122.173.28.61

🇺🇸 66.132.224.15

🇮🇳 49.43.92.166

🇭🇰 45.249.246.196

🇩🇪 43.228.157.204

🇦🇪 20.203.42.204

🇳🇱 2.26.20.64

🇳🇱 195.178.110.30

🇧🇷 187.110.238.50

🇮🇶 185.24.61.171

🇧🇷 179.61.154.206

🇸🇬 143.198.204.165

🇨🇳 106.75.222.86

🇺🇸 97.107.133.213