104[.]21[.]39[.]21

Posts referencing this indicator

• Banana RAT Evolves: Comparing Two Recent Branches Through ANY.RUN

  ANY.RUN

  Cloudflare edge IP resolving for 52facc3b24f8bad9c5c56819e385f3a1.testewin.com; used to obscure backend C2 origin

  2026-07-07