asn.dev

Autonomous system

AS48693 NTSERVICE-AS

Unclassified Spamhaus ASN-DROP RIPE

IPv4 addresses 2.56K 6 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly UA
Exchanges 0 recorded by PCH
Upstreams 2 2 downstream
Flagged prefixes 0 none

Summary

Rices Privately owned enterprise

Ukraine · AI-generated

hosting residential business

NTSERVICE-AS is operated by Rices Privately owned enterprise.

What it's used for

  • The address space carries a mix of reserved infrastructure and customer endpoints, with reverse DNS showing ntup.net and ntup.network domains alongside specific hostnames like moen.milltech-ltd.co.uk and igorluzganhome.ntup.network.
  • The network announces 2560 IPv4 addresses across 6 prefixes and maintains 6 observed neighbours, a ratio consistent with a hosting or access provider rather than a transit carrier.
  • Traffic from this AS includes web hosting, data center services, and residential or business user connections, as indicated by the diverse PTR records and the operator's classification as a data center/web hosting provider.

Notable

  • Registrants for the largest prefixes include Demenin b.v. for 194.38.20.0/22 and 185.243.96.0/23, while other prefixes are registered to Rices Privately owned enterprise or NT-NOC.
  • The inventory includes prefixes originally associated with Dutch registrants (Demenin b.v.), suggesting historical acquisition or leasing of address space from European providers.
  • The address inventory is fragmented across multiple /24 and /23 blocks, with no IPv6 prefixes announced.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

2 upstream, 2 downstream and 4 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS59514PE Kucherenko V.V.585
AS209155Onehostplanet s.r.o.59

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-16, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 6 prefixes · 2.56K addresses IPv6 0 prefixes

CountryNamePrefixes
UAUkraine6

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS48693
Registry name
NTSERVICE-AS
Registrant
NTSERVICE-AS
Abuse contact
abuse@ntup.net
Registered
2016-02-25
Last changed
2026-09-15
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
0% valid · 0 valid, 10 with no ROA
ROAs
0 authorising AS48693
ASPA
no ASPA record
IRR
100% registered · 10 of 10 announcements
Route objects
14 naming AS48693

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

On Spamhaus ASN-DROP Spamhaus lists this entire network (associated domain ntup.net) as controlled by, or hijacked for, cybercrime. Many operators null-route everything it originates.

4 DROP matches Announced space overlapping the DROP prefix list.

AnnouncedDROP entryRecord
185.243.96.0/23185.243.96.0/24SBL691553
194.38.20.0/22194.38.20.0/22SBL691383
194.38.20.0/22194.38.21.0/24SBL690096
194.38.20.0/22194.38.22.0/24SBL691355

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,783 prefixes, as published 2026-10-17. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check