ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 154.92.16.219:6666.

Database Entry

IOC ID:	1753958
IOC:	154.92.16.219:6666
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	ValleyRAT
Malware alias:	Winos
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS142403 YISUCLOUDLTD-HK
Country:	HK
First seen:	2026-02-24 06:05:28 UTC
Last seen:	2026-03-03 08:38:24 UTC
UUID:	d19a5bdf-1146-11f1-a068-42010aa4000a
Reporter	DonPasci
Reward	5 credits from ThreatFox
Tags:	AS142403 c2 RAT triage ValleyRAT
Reference:	https://tria.ge/260224-gpkg5aaz4g

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).