Remcos RAT C2 to 62.102.148.212 or acceic.ddns.net on Port 37393

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•1

This rule detects network connections to a specific destination port (37393), a known malicious IP address (62.102.148.212), or a dynamic DNS hostname (acceic.ddns.net). These indicators are often associated with command and control (C2) infrastructure used by adversaries.