188.210.132.49

Classification: Malicious

188.210.132.49 is a malicious IP address in Tehran, IR. Reported by Rapid7 Open Data and Barracuda (Mail Spammer, NTP Open Resolver), last seen 2026-10-17.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2026-10-17 11:24:38 2026-10-17 11:24:38 attacker malicious-activity
NTP Open Resolver Rapid7 Open Data 2018-12-03 05:27:02 2018-12-03 05:27:02

Tags

ntp reflection amplification open resolver monlist

Whois information

AS name
AS58224 Telecommunication Company of Tehran
AS registry
ripencc
AS date
2009-05-08 00:00:00
AS CIDR
188.210.128.0/18
Registrant
Telecommunication Company of Tehran
City
Tehran
Postal code
1145933187
Country
IR — Iran, Islamic Republic of 🇮🇷
First indexed
2018-12-03 05:27:02
Last updated
2026-10-17 11:24:39

Malicious IPs in the same CIDR

188.210.145.93 188.210.135.68 188.210.146.56 188.210.187.43 188.210.179.84 188.210.190.87 188.210.170.5 188.210.142.83 188.210.189.75 188.210.130.43 188.210.175.37 188.210.144.23 188.210.142.31 188.210.149.92 188.210.165.60 188.210.190.13 188.210.158.77 188.210.152.83 188.210.145.63 188.210.180.67 188.210.173.53 188.210.188.5 188.210.144.82 188.210.158.38 188.210.151.79