IOC Radar
IPMediumSignal 77/100

85.204.74.143

Location
LithuaniaLithuania
Šiauliai, Siauliai
ASN
AS16125
Fastserv
First Seen
Jun 5, 2020
Last Seen
Feb 19, 2026
Jun 5
First Seen
2209d ago
Feb 19
Last Seen
123d ago
11
Reports
source reports
77%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
77%
Signal Score
77 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

16 techniques

Network Information

CountryLTLithuania
RegionŠiauliai, Siauliai
ASNAS16125
OrganizationFastserv

Feed Intelligence Summary

11 reports77% confidence
11
Source reports
77%
Confidence score
Category tags
aptapt27botnetcertchina choppercommand and controlcredential accesscredential harvestingdata exfiltrationdistributed attacksdll sideloadingemissary pandaeuropeindicatorinfrastructure acquisitionreconnaissanceingress tool transferlithuanialtmalicious softwaremalwaremanualnetworkphishing attackplugxprocess injectionratresearchedsocial engineeringt1003.001t1055t1059.003t1071.001t1105t1486t1496t1499.002t1499.003t1547.001t1565t1566.001t1566.002t1566.003t1587.001t1590.001trojan malwareturkey

Activity Timeline

1 total obs
Feb 19Feb 19

Threat Activity Heatmap

· Peak: 2026-02-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
77
SIGNAL
Signal Score
77%
Confidence
11
Reports
First seenJun 5, 2020
Last seenFeb 19, 2026
GeolocationLT
CountryLithuania
LocationŠiauliai, Siauliai
ASNAS16125
OrgFastserv
Coords55.9399, 23.3132

VirusTotal

Not checked

WHOIS

raw
inetnum: 85.204.74.128 - 85.204.74.255 netname: FASTSERV-CUST-POOL country: LT admin-c: QL56-RIPE tech-c: QL56-RIPE status: ASSIGNED PA created: 2026-01-23T09:52:01Z last-modified: 2026-01-23T09:52:01Z source: RIPE mnt-by: QHoster role: Fast Serv Inc. d.b.a. QHoster.com address: 1 Mapp Street address: Belize City, Belize phone: +359 89 8547122 abuse-mailbox: [email protected] nic-hdl: QL56-RIPE mnt-by: QHoster admin-c: MD21847-RIPE tech-c: MD21847-RIPE created: 2014-03-09T23:57:28Z last-modified: 2026-01-30T09:48:44Z source: RIPE # Filtered route: 85.204.74.0/24 descr: CHERRY SERVERS origin: AS16125 mnt-by: DUOMENUCENTRAS-MNT created: 2015-03-23T17:47:26Z last-modified: 2017-05-09T13:12:45Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 6 years ago · Last seen 4 months ago
Appeared in 11 threat reports