ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 204.194.49.119:3842.

Database Entry


IOC ID:1582204
IOC: 204.194.49.119:3842
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ValleyRAT
Malware alias:Winos
Confidence Level : Confidence level is high (100%)
ASN:AS140869 TGL-AS-AP
Country:- NZ
First seen:2025-09-05 06:25:14 UTC
Last seen:never
UUID:1519bcc5-8a21-11f0-bfa6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RAT ValleyRAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-09-05 07:00:26 d7adfc9774a6f8f2e40da98960bbaaefd6851a362ed0953281df63a449c9bff1
2025-09-05 06:25:14 be9dd4f3f02b114a25b98bacf4c04b1ac917a53831146418d929772286728602