IPMediumSignal 100/100
83.222.191.6
Location
United StatesKarlovo, Plovdiv
First Seen
Sep 27, 2024
Last Seen
Sep 18, 2025
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionKarlovo, Plovdiv
Organization4Media Ltd
Feed Intelligence Summary
14 reports99% confidence
14
Source reports
99%
Confidence score
Category tags
abuseaccess controlaccount compromiseaccount securityactive scanningadministrative accessattackaustraliabotnetbotnet detectionbrute forcebrute force attackbrute force attemptsbulgariac2 communicationc2 detectionc2 servercommand and controlcommunication protocolcompromised hostcompromised hostscompromised systemcredential accesscredential harvestingcredential stuffingdata exfiltrationdatabase securityddosddos attackddos attacksdecoy systemdenial of servicedistributed attackseuropeexploitexploit attemptsexploited hostftp attacksftp brute forcehackinghttp brute forcehttp scannerhttp scanninghttps scanningindicatorinfected hostinfrastructure acquisitionreconnaissanceinjection attacksinternet of thingsintrusion detectioniot botnetiot/ics attackipv4 scanlateral movementmalicious activitymalicious ip addressesmalicious linksmalicious softwaremalwaremalware distributionmalware filtermalware propagationmalware scanningmirai botnetnetworknetwork anomaliesnetwork attacksnetwork intrusionnetwork probingnetwork scanningnetwork securitynetwork traffic analysisnorth americaoceaniaoperating systemoperating system securitypassword attacksphishingphishing attackping of deathpossible botnet activitypotential exploit attemptpotential vulnerability scanprivilege escalationprocess injectionrdp attacksreconnaissanceremote accessremote servicesresearchedromaniascanscannerscanning activitysecurity operationssecurity policysip scanningsmtp brute forcesocial engineeringsql injection attemptsssh attackssh attackst1003t1005t1018t1021t1021.001t1021.003t1040t1046t1053t1055t1059t1059.003t1059.004t1068t1069.001t1071t1071.001t1076t1078t1088t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1189t1190t1199t1204.001t1210t1486t1496t1497t1499.001t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1573t1573.001t1587.001t1588t1589t1590.001t1595t1595.001t1595.002t1595.003tcp protocoltelecommunicationsthreat actorthreat intelligencethreat preventionunauthorized accessunauthorized access attemptsunited statesvoipweb securityweb traffic
Activity Timeline
Sep 18Sep 18
Threat Activity Heatmap
· Peak: 2025-09-18LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
14
Reports
First seenSep 27, 2024
Last seenSep 18, 2025
GeolocationUS
CountryUnited States
LocationKarlovo, Plovdiv
Org4Media Ltd
Coords42.6951, 23.3250
VirusTotal
Not checked
WHOIS
- raw
- inetnum: 83.222.190.0 - 83.222.191.255 netname: Net_4Media org: ORG-AA2048-RIPE country: BG admin-c: PD8817-RIPE tech-c: PD8817-RIPE status: ASSIGNED PA mnt-by: MNT-LIR-BG created: 2024-07-03T10:05:33Z last-modified: 2024-07-03T10:05:33Z source: RIPE organisation: ORG-AA2048-RIPE org-name: 4Media Ltd. country: BG org-type: OTHER address: 35, Ivan Vazov str, Sopot, Bulgaria abuse-c: AA33554-RIPE mnt-ref: TAMATYA-MNT mnt-ref: MNT-LIR-BG mnt-by: MNT-LIR-BG created: 2018-05-31T08:09:29Z last-modified: 2022-12-01T17:00:25Z source: RIPE # Filtered person: Petar Dimov address: [email protected] address: [email protected] phone: +359988865442 nic-hdl: PD8817-RIPE mnt-by: TAMATYA-MNT created: 2016-11-06T19:36:43Z last-modified: 2022-12-20T20:23:46Z source: RIPE route: 83.222.191.0/24 origin: AS204428 mnt-by: MNT-LIR-BG created: 2024-07-03T10:05:33Z last-modified: 2024-07-03T10:05:33Z source: RIPE
- references
- https://example.com, https://redpiranha.net
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 9 months ago
Appeared in 14 threat reports