JadePuffer C2 beacon HTTP GET /beacon to known C2 IP:port

Duo Tech@duotech

•updated Jul 8, 2026•1•0•3

Detects HTTP GET requests to the URI '/beacon' destined for a known JadePuffer command-and-control server IP address (45.131.66.106) on port 4444. This signature identifies potential beaconing activity, which is a common communication pattern for malware implants communicating with an adversary-controlled server.