JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.65.149.196

176.65.149.196 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	Pfcloud UG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51396
Hostname(s)	176.65.149.196.ptr.pfcloud.network
Domain Name	pfcloud.io
Country	🇳🇱 Netherlands
City	Eygelshoven, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.65.149.196

Whois 176.65.149.196

IP Abuse Reports for 176.65.149.196:

This IP address has been reported a total of 139 times from 96 distinct sources. 176.65.149.196 was first reported on March 25th 2025, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Threat.live	2026-09-01 14:25:05 (10 minutes ago)	Threat.live: Web Scan	Web App Attack
🇺🇸 xmission.com	2026-09-01 14:13:16 (22 minutes ago)	Blocked by UFW (TCP on 8080) Source port: 37141 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 37141 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 176.65.149.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 VentryShield	2026-09-01 14:02:47 (32 minutes ago)	p0t honeypot: unknown connection on port 8080/tcp, 123 bytes received from client	Port Scan
Anonymous	2026-09-01 13:52:05 (43 minutes ago)	2026-09-01T15:52:04.398028+02:00 vps kernel: [4641540.711472] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-01T15:52:04.398028+02:00 vps kernel: [4641540.711472] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=176.65.149.196 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=42066 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 ValtonTahiri	2026-09-01 13:37:48 (57 minutes ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=176.65.149.196; proto=TCP; source_port=33768; target_port=8080; flags=SYN show less	Port Scan
🇺🇸 ratcarcher-labs	2026-09-01 13:24:33 (1 hour ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=4 depth=0 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=4 depth=0 node=node-ap-south canary=no human_score=35 agentic=15 cc=NL asn=Pfcloud UG (haftungsbeschrankt) \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
🇧🇷 Peregrine	2026-09-01 13:21:00 (1 hour ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 176.65.149.196 - - [01/Sep/2026:10:20:50 -0300] " ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 176.65.149.196 - - [01/Sep/2026:10:20:50 -0300] "POST /cgi-bin/index2.asp HTTP/1.1" 404 18193 show less	Bad Web Bot
🇺🇸 xmission.com	2026-09-01 13:20:02 (1 hour ago)	Blocked by UFW (TCP on 80) Source port: 35280 TTL: 236 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 35280 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 176.65.149.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xxkodedxx	2026-09-01 13:18:44 (1 hour ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: NL / AS51396 Pfcloud UG (haftungsbeschrankt) Active: 13:17:47 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-09-01 13:09:40 (1 hour ago)	Knock-Knock HTTP honeypot activity; time=2026-09-01 13:08:07; http_method=GET; http_path=/; http_pur ... show more Knock-Knock HTTP honeypot activity; time=2026-09-01 13:08:07; http_method=GET; http_path=/; http_purpose=basic_probe; http_user_agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.3 show less	Web App Attack
🇺🇸 MPL	2026-09-01 12:59:39 (1 hour ago)	tcp ports: 80,8080 (4 or more attempts)	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-09-01 12:49:27 (1 hour ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 44B \| Win: 65535(1) \| rDNS: 176.65.149.196.ptr.pfcloud.network \| F2B/ufw-honeypot@2026-09-01T12:49:27Z show less	Port Scan Hacking
🇩🇪 pltcldvlpr	2026-09-01 12:45:43 (1 hour ago)	CMS/framework probe: 176.65.149.196 - - [01/Sep/2026:14:45:42 +0200] "GET / HTTP/1.1" 301 178 "http: ... show more CMS/framework probe: 176.65.149.196 - - [01/Sep/2026:14:45:42 +0200] "GET / HTTP/1.1" 301 178 "http://45.157.179.231:80/cgi-bin/index2.asp" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" asn=51396 org="Pfcloud UG (haftungsbeschrankt)" country=NL ... show less	Web App Attack
🇩🇪 sandra361	2026-09-01 12:30:01 (2 hours ago)	Port scan detected: 6 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=176.65.149 ... show more Port scan detected: 6 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=176.65.149.196 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=33977 DF PROTO=TCP SPT=57150 DPT=80 WINDOW=32120 RES=0x00 ACK FIN URGP=0 show less	Port Scan
Anonymous	2026-09-01 12:16:29 (2 hours ago)	176.65.149.196 - - [01/Sep/2026:14:16:28 +0200] "GET / HTTP/1.1" 200 10671 "http://176.114.248.58:80 ... show more 176.65.149.196 - - [01/Sep/2026:14:16:28 +0200] "GET / HTTP/1.1" 200 10671 "http://176.114.248.58:80/cgi-bin/index2.asp" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.204

🇲🇳 180.149.125.165

🇹🇷 79.123.131.37

🇺🇸 77.47.158.131

🇺🇸 69.164.214.243

🇺🇸 62.101.169.187

🇺🇸 207.177.80.78

🇧🇷 201.17.146.173

🇺🇸 185.226.196.23

🇮🇩 110.136.191.105

🇵🇱 109.199.95.5

🇦🇹 109.70.100.6

🇮🇹 88.147.35.59

🇺🇸 74.7.227.12

🇺🇸 66.118.5.123

🇻🇳 27.78.126.160

🇺🇸 20.190.155.66

🇿🇦 2c0f:fb50:4001:5::121

🇩🇪 2600:1900:40d1:4c9:0:6::

🇮🇳 2409:40c4:10ee:2087:f571:b61d:11d8:4085