Empire C2 Detected - 134[.]209[.]99[.]16:80

The Information provided at the time of posting was detected as “Empire C2”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2024-06-05T00:08:18.906056

General Information

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

Buy Me A Coffee

Patreon

To keep up to date follow us on the below channels.

Tags: Empire c2, OSINT, Security, threatintel

Cloud Provider	DigitalOcean
Cloud Region	sg-05
Service	N/A
Domains	N/A
Hostnames	N/A
HTTP Host	134[.]209[.]99[.]16
ISP	DigitalOcean, LLC
ORG	DigitalOcean, LLC
OS	Windows
HTTP	–!>
HTTP HTML HASH	611100469
HTTP LOCATION	/
HTTP REDIRECTS
HTTP ROBOTS	N/A
HTTP ROBOTS HASH	N/A
HTTP SECURITY.TXT	N/A
HTTP SECURITY.TXT HASH	N/A

Empire C2 Detected – 134[.]209[.]99[.]16:80

General Information

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80

General Information

You may have missed

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80