🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 156.225.94.168:6666.

Database Entry


IOC ID:1868904
IOC: 156.225.94.168:6666
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ValleyRAT
Malware alias:Winos
Confidence Level : Confidence level is high (99%)
Is compromised? : False
ASN:AS140869 TGL-AS-AP
Country:- NZ
First seen:2026-08-05 15:26:45 UTC
Last seen:never
UUID:d8527e6c-90dc-11f1-8325-42010aa4000a
Reporter netresec
Reward 5 credits from ThreatFox
Reference: https://infosec.exchange/@james_inthe_box/117043079612634956

Avatar
netresec
Malicious protocol ValleyRAT