IOC Radar
IPMediumSignal 82/100

91.92.42.120

Location
BulgariaBulgaria
Amsterdam, Sofia (stolitsa)
ASN
AS209630
LLC VASH KREDIT BANK
First Seen
May 21, 2026
Last Seen
Jun 19, 2026
May 21
First Seen
36d ago
Jun 19
Last Seen
7d ago
18
Reports
source reports
82%
Confidence
medium
Found in 18 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
82%
Signal Score
82 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryBGBulgaria
RegionAmsterdam, Sofia (stolitsa)
ASNAS209630
OrganizationLLC VASH KREDIT BANK

Feed Intelligence Summary

18 reports82% confidence
18
Source reports
82%
Confidence score
Category tags
abuseactive scanapacheapache attackeraptbad reputationbad web botbgblocklistblocklist_allblog spambotnet activitybrute forcebrute force attackerbrute-forcebruteforcebulgariacowrieddosddos attackeuropeexploitation activityexploited hosthackinginjection activitynetherlandsnetworknlproxyresearchresearchedsakura httpscannerspamsql injectionsshssh-brutetargeting databasethreat actorwebweb app attackweb spam

Activity Timeline

1 total obs
Jun 19Jun 19

Threat Activity Heatmap

· Peak: 2026-06-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
82
SIGNAL
Signal Score
82%
Confidence
18
Reports
First seenMay 21, 2026
Last seenJun 19, 2026
GeolocationBG
CountryBulgaria
LocationAmsterdam, Sofia (stolitsa)
ASNAS209630
OrgLLC VASH KREDIT BANK
Coords42.6975, 23.3241

VirusTotal

Not checked

WHOIS

raw
inetnum: 91.92.42.0 - 91.92.42.255 netname: Aeza-Network country: SE geofeed: https://aeza.net/static/ipv4_f.csv org: ORG-AGL38-RIPE admin-c: AN32681-RIPE tech-c: AN32681-RIPE mnt-domains: aeza-mnt status: SUB-ALLOCATED PA mnt-by: mnt-bg-eurocrypt-1 mnt-by: aeza-mnt created: 2025-01-14T14:33:15Z last-modified: 2025-04-08T08:12:30Z source: RIPE organisation: ORG-AGL38-RIPE org-name: Aeza International LTD org-type: OTHER address: 311 Shoreham Street, Sheffield, S2 4FA, United Kingdom abuse-c: AA38875-RIPE mnt-ref: aeza-mnt mnt-ref: renets-mnt mnt-ref: VF1-MNT mnt-ref: DN-MNT mnt-ref: WEBROCKET-MNT mnt-ref: QWARTA-MNT mnt-ref: ROSNIIROS-MNT mnt-ref: Corinnafisch-MNT mnt-ref: Cyber-MNT mnt-ref: NETWORK-MANAGEMENT-MNT mnt-ref: LIR-ae-royal-1-MNT mnt-ref: JD-RIPE-MNT mnt-ref: AS15509-MNT mnt-ref: sistemallc-mnt mnt-ref: lir-gr-geniusmind-1-MNT mnt-by: aeza-mnt created: 2021-11-23T13:59:30Z last-modified: 2025-02-10T22:04:01Z source: RIPE # Filtered role: Aeza International LTD address: 311 Shoreham Street, Sheffield, S2 4FA, United Kingdom abuse-mailbox: [email protected] nic-hdl: AN32681-RIPE mnt-by: aeza-mnt created: 2021-10-13T17:49:21Z last-modified: 2024-10-16T14:38:44Z source: RIPE # Filtered route: 91.92.42.0/24 origin: AS210644 mnt-by: mnt-bg-eurocrypt-1 created: 2025-04-08T08:10:55Z last-modified: 2025-04-08T08:10:55Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 7 days ago
Appeared in 18 threat reports