Autonomous system
AS12962 FIBANK
Unclassified RIPE
Summary
First Investment Bank
finance business enterprise
A netname carrying a date written backwards, on a bank's block held by a telecom.
What it's used for
- The network of a Bulgarian commercial bank. 512 addresses across two IPv4 prefixes, three observed BGP neighbours, and no IPv6 announced.
Notable
- The inventory is
87.227.206.0/24and193.178.166.0/24. - The netnames are
FIBANK_NET_27042018andFIBANK-BG-1. - The first is registered to a telecommunications company's abuse contact, not the bank.
- Six addresses were sampled and none returned a name.
Interesting
27042018is a date written day, month, year, in a field where every other dated netname in this range puts the year first. Year-first dates sort correctly as text and day-first ones do not, which is exactly why the convention exists, and this record shows how little the convention is actually enforced. It is also underscore-separated where the rest use hyphens.- One block is registered to a telecom and one to the bank. Space obtained through a provider stays in the provider's name and space obtained directly does not, so a two-block network can show both arrangements at once and the difference tells you which addresses the bank could keep if it changed provider.
FIBANK-BG-1is another first-of-a-series netname with no second. Three neighbours and 512 addresses is the whole network; the numbering anticipated growth the bank never needed on the public side.- Nothing answers reverse lookups, which for retail banking infrastructure is unsurprising: the customer-facing web presence is almost always hosted somewhere else entirely.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 2 prefixes · 512 addresses IPv6 0 prefixes
| Country | Name | Prefixes |
|---|---|---|
| BG | Bulgaria | 2 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS12962- Registry name
- FIBank
- Registrant
- ORBITEL-NOC
- Abuse contact
- ripe.abuse@mobiltel.bg
- Registered
- 1970-01-01
- Last changed
- 2017-11-15
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 100% valid · 2 valid, 0 with no ROA
- ROAs
- 2 authorising AS12962
- ASPA
- no ASPA record
- IRR
- 100% registered · 2 of 2 announcements
- Route objects
- 2 naming AS12962
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 442 networks and 1,781 prefixes, as published 2026-10-16. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere