JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.243.99.132

Recent Activity

Abuse Confidence Score

45% Elevated

13 reports

10 reporters · latest 6 days ago

ISP: Rices Privately owned enterprise
Usage Type: Data Center/Web Hosting/Transit
ASN: AS48693
Domain Name: ntup.net
Country: 🇺🇦 Ukraine
City: Kyiv, Kyiv City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 10 distinct reporters

First reported

December 7th 2025

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇵🇱 Poland 2 🇷🇴 Romania 2

Most common categories Brute-Force 6 Email Spam 5 Hacking 3 Web App Attack 2 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ruusvuu	2026-11-02 02:00:32 UTC · (6 days ago)	Automated abuse report: 25 attack/probe requests from Rices Privately owned enterprise / UA. Targeted paths: /round. Sample log lines: [nafco] 2026-11-02T02:00:31.460Z 185.243.99.132 - GET /round 404 - - 3.765 ms ref="-" Detected by an automated web- ... show more Automated abuse report: 25 attack/probe requests from Rices Privately owned enterprise / UA. Targeted paths: /round. Sample log lines: [nafco] 2026-11-02T02:00:31.460Z 185.243.99.132 - GET /round 404 - - 3.765 ms ref="-" Detected by an automated web-server log monitor. show less	Web App Attack
🇵🇱 KZGM	2026-10-28 00:09:48 UTC · (1 week ago)	smtp - too many invalid logins. Banned by fail2ban.	Brute-Force
🇩🇪 initsol	2026-10-27 21:28:03 UTC · (1 week ago)	2026-10-27T23:28:01.196775+02:00 phoenix postfix/smtpd[222134]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<uajozctjq6cf@hartl-online ... show more 2026-10-27T23:28:01.196775+02:00 phoenix postfix/smtpd[222134]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> 2026-10-27T23:28:01.779228+02:00 phoenix postfix/smtpd[222048]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> 2026-10-27T23:28:02.364756+02:00 phoenix postfix/smtpd[222134]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> ... show less	Brute-Force
🇷🇴 ICT	2026-10-27 16:32:36 UTC · (1 week ago)	Oct 27 18:32:33 acad-icht postfix/smtpd[40805]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<1 ... show more Oct 27 18:32:33 acad-icht postfix/smtpd[40805]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 27 18:32:34 acad-icht postfix/smtpd[40818]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 27 18:32:35 acad-icht postfix/smtpd[40805]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 27 18:32:36 acad-icht postfix/ ... show less	Email Spam Hacking
🇵🇱 KZGM	2026-10-26 10:25:42 UTC · (1 week ago)	smtp - too many invalid logins. Banned by fail2ban.	Brute-Force
🇩🇪 FD-IX	2026-10-26 09:30:39 UTC · (1 week ago)	SMTP connection rejected due to missing valid reverse DNS (PTR).	Email Spam
🇩🇪 initsol	2026-10-26 09:22:07 UTC · (1 week ago)	2026-10-26T11:22:05.763704+02:00 phoenix postfix/smtpd[169140]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<aq8me1zmqzrw@hartl-online ... show more 2026-10-26T11:22:05.763704+02:00 phoenix postfix/smtpd[169140]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> 2026-10-26T11:22:06.325364+02:00 phoenix postfix/smtpd[169327]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> 2026-10-26T11:22:06.887661+02:00 phoenix postfix/smtpd[169140]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 450 4.7.1 <mail.validator.local>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> ... show less	Brute-Force
🇳🇱 Alt255	2026-10-26 07:57:59 UTC · (1 week ago)	[mx01aln] Mail server brute-force: 3 failed attempts detected by fail2ban jail postfix.	Brute-Force
🇷🇴 ICT	2026-10-26 07:30:57 UTC · (1 week ago)	Oct 26 09:30:55 acad-icht postfix/smtpd[4952]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<4p ... show more Oct 26 09:30:55 acad-icht postfix/smtpd[4952]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 26 09:30:55 acad-icht postfix/smtpd[4952]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 26 09:30:56 acad-icht postfix/smtpd[4952]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.validator.local> Oct 26 09:30:57 acad-icht postfix/smt ... show less	Email Spam Hacking
🇨🇭 Origon	2026-10-26 05:48:21 UTC · (1 week ago)	NOQUEUE - IP: 185.243.99.132 - Oct 26 06:48:21 plesk postfix/smtpd[2516135]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 554 5.7.1 Service unavailable; Client host [185.243.99.132] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: ... show more NOQUEUE - IP: 185.243.99.132 - Oct 26 06:48:21 plesk postfix/smtpd[2516135]: NOQUEUE: reject: RCPT from unknown[185.243.99.132]: 554 5.7.1 Service unavailable; Client host [185.243.99.132] blocked using spam.spamrats.com; SPAMRATS IP Addresses See: https://[site]/bl?185.243.99.132; from=<[email protected]> to=<[customer]> proto=SMTP helo=<mail.validator.local> show less	Email Spam
🇦🇺 rubixstudios	2026-10-26 03:00:03 UTC · (1 week ago)	Suspicious SMTP activity detected. Type: Repeated dropped SMTP connections (8 hits).	Email Spam Port Scan
Anonymous	2026-10-21 04:02:09 UTC · (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-07 22:34:57 UTC · (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.58.91.130

🇳🇱 195.178.110.151

🇳🇱 193.176.31.253

🇦🇷 190.188.232.121

🇧🇴 189.28.64.11

🇵🇱 172.64.200.179

🇵🇱 172.64.200.75

🇨🇳 118.31.189.46

🇩🇪 104.207.57.126

🇲🇦 102.97.137.52

🇩🇪 94.26.106.83

🇺🇸 69.7.70.173

🇺🇸 66.249.66.76

🇨🇦 38.62.92.246

🇸🇴 197.231.202.201

🇰🇷 175.213.102.205

🇩🇪 167.94.146.76

🇨🇳 125.77.73.145

🇰🇿 95.57.239.26

🇷🇴 92.118.39.77