asn.dev

Autonomous system

AS12962 FIBANK

Unclassified RIPE

IPv4 addresses 512 2 prefixes
IPv6 prefixes 0 counted as prefixes, not addresses
Countries 1 mostly BG
Exchanges 0 recorded by PCH
Upstreams 3 0 downstream
Flagged prefixes 0 none

Summary

First Investment Bank

Bulgaria · AI-generated

finance business enterprise

A netname carrying a date written backwards, on a bank's block held by a telecom.

What it's used for

  • The network of a Bulgarian commercial bank. 512 addresses across two IPv4 prefixes, three observed BGP neighbours, and no IPv6 announced.

Notable

  • The inventory is 87.227.206.0/24 and 193.178.166.0/24.
  • The netnames are FIBANK_NET_27042018 and FIBANK-BG-1.
  • The first is registered to a telecommunications company's abuse contact, not the bank.
  • Six addresses were sampled and none returned a name.

Interesting

  • 27042018 is a date written day, month, year, in a field where every other dated netname in this range puts the year first. Year-first dates sort correctly as text and day-first ones do not, which is exactly why the convention exists, and this record shows how little the convention is actually enforced. It is also underscore-separated where the rest use hyphens.
  • One block is registered to a telecom and one to the bank. Space obtained through a provider stays in the provider's name and space obtained directly does not, so a two-block network can show both arrangements at once and the difference tells you which addresses the bank could keep if it changed provider.
  • FIBANK-BG-1 is another first-of-a-series netname with no second. Three neighbours and 512 addresses is the whole network; the numbering anticipated growth the bank never needed on the public side.
  • Nothing answers reverse lookups, which for retail banking infrastructure is unsurprising: the customer-facing web presence is almost always hosted somewhere else entirely.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

3 upstream, 0 downstream and 3 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS8866Vivacom Bulgaria EAD68
AS3356Level 3 Parent, LLC42
AS8717A1 Bulgaria EAD12

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 2 prefixes · 512 addresses IPv6 0 prefixes

CountryNamePrefixes
BGBulgaria2

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS12962
Registry name
FIBank
Registrant
ORBITEL-NOC
Abuse contact
ripe.abuse@mobiltel.bg
Registered
1970-01-01
Last changed
2017-11-15
Allocation
allocated

Routing security

RPKI and IRR

Full detail
RPKI
100% valid · 2 valid, 0 with no ROA
ROAs
2 authorising AS12962
ASPA
no ASPA record
IRR
100% registered · 2 of 2 announcements
Route objects
2 naming AS12962

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,781 prefixes, as published 2026-10-16. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check