VSHELL RAT C2 Beacon to 38.60.253.35:8084 via WebSocket (SNOWLIGHT)

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•4

This rule detects outbound network connections to the specific IP address 38.60.253.35 on port 8084. Such traffic is highly suspicious and indicative of potential communication with a Command and Control (C2) server.