91.92.42.64 Threat Intelligence and Host Information
Jun 24, 2026
ipinfopage
General
IP Address
91.92.42.64
Location
🇧🇬 Sofia, Bulgaria
Network
AS25211
Threat Score
40/100
Attack Intelligence
MITRE ATT&CK Techniques
T1595 - Active Scanning
Geographic Location
Country
Bulgaria
City
Sofia
Region
Sofia-Capital
Coordinates
42.6951, 23.3250
Network Information
ASN
AS25211
Organization
Euro Crypt EOOD
Network
AS25211 Euro Crypt EOOD
WHOIS Information
inetnum
91.92.42.0 - 91.92.42.255
netname
IPv4
abuse-c
ACRO64662-RIPE
org
ORG-TI147-RIPE
mnt-routes
techties-mnt
country
SC
geofeed
https://cdn.tech-ties.net/geofeed.csv
admin-c
TIN51-RIPE
tech-c
TIN51-RIPE
status
ASSIGNED PA
mnt-by
mnt-bg-eurocrypt-1
created
2026-05-15T07:45:11Z
last-modified
2026-05-15T07:45:11Z
organisation
ORG-TI147-RIPE
org-name
TechTies Inc.
org-type
OTHER
address
306 Victoria House, Victoria Mahe, Seychelles
reg-nr
250236
mnt-ref
techties-mnt
role
TechTies Inc. 24x7 NOC
abuse-mailbox
abuse@tech-ties.net
nic-hdl
TIN51-RIPE
route
91.92.42.0/24
origin
AS209630
Attack Logs
| Date | Target Location | Protocol | Link |
|---|---|---|---|
| 2026-06-25 | Perth, Australia | MULTIPLE | View Log |
- Country: Bulgaria
- Network:
- Noticed: 15 times
- Protocols Attacked: portscan ssh
- Countries Attacked: Australia, China, Finland, France, Germany, Poland, Russian Federation, United Kingdom of Great Britain and Northern Ireland, United States of America
- Passive DNS Results: gortvtsa.shop
Disclaimer
This page contains threat intelligence information for the IPv4 address 91.92.42.64 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.