ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 151.242.152.131:1234.

Database Entry

IOC ID:	1748225
IOC:	151.242.152.131:1234
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	ValleyRAT
Malware alias:	Winos
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS400342 EDGENAT-CLOUD
Country:	US
First seen:	2026-02-14 12:05:15 UTC
Last seen:	2026-03-03 08:38:23 UTC
UUID:	6c0f0aef-099d-11f1-a068-42010aa4000a
Reporter	DonPasci
Reward	5 credits from ThreatFox
Tags:	AS400342 c2 RAT triage ValleyRAT
Reference:	https://tria.ge/260214-jxpsxsd14e

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).