ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 163.5.63.96:27000.

Database Entry


IOC ID:1673974
IOC: 163.5.63.96:27000
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remcos
Malware alias:RemcosRAT, Remvio, Socmer
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS215703 FREAKHOSTING
Country:- GB
First seen:2025-12-10 05:15:35 UTC
Last seen:2025-12-19 10:40:17 UTC
UUID:4238ea96-d587-11f0-a341-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:remcos
Reference: https://bazaar.abuse.ch/sample/af624a6f2bfceaacff6bc589279529b37b280287d4230e5d46c6f07aa03b8af8/

Avatar
abuse_ch
remcos (aka RemcosRAT,Remvio,Socmer) botnet C2