huntback / IP intelligence

2.26.229.254

RESIDENTIALoperator-submittedadaptixc2coinminerelf-binaryexposed-secret

Intelligence

ASN / OrgAS215439 · PLAY2GO INTERNATIONAL LIMITED
CountryGermany
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 4321, 7000
Loot harvested43 file(s), 33964 KB · adaptix, c2, coinminer, elf-binary, exposed-secret, malware

Open directory contents (43)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
svchost.exePE6.2 MB
timesync.binELF6.1 MB
PSTools.zipZIP5.0 MB
ms11-080.exePE4.2 MB
OpenSSH-Win64.zipZIP4.2 MB
ms11-080-AddUser.exePE3.6 MB
xmrig.zipZIP2.6 MB
nssm.exePE323 KB
http-server.logLOG252 KB
MS11_80_k8.exePE168 KB
agent.x64_long_haul.exePE102 KB
dllhost.exePE102 KB
svhost.exePE102 KB
agent.x64.binBIN101 KB
lock.7z7Z47 KB
nyx.ps1PS139 KB
phoenix_installer.batBAT26 KB
‹redacted›.sysPE14 KB
.monero_install.bat.swpSWP12 KB
monero_install.ps1PS19 KB
install.shSH7 KB
deploy_imlants.ps1PS15 KB
nyx_run.ps1PS14 KB
diag_watchdog.ps1PS13 KB
diag_binary_check.ps1PS12 KB
diag_wmi.ps1PS12 KB
config.jsonJSON2 KB
deploy_imlants.batBAT2 KB
load_sc.ps1PS12 KB
diag_boot.ps1PS12 KB
diag_hub.ps1PS11 KB
monero_install.batBAT1 KB
‹redacted›.cmdCMD1 KB
diag_folder_check.ps1PS11 KB
‹redacted›.cmdCMD1023 B
‹redacted›.cmdCMD887 B
‹redacted›.cmdCMD821 B
SHA256SUMSTXT748 B
nyx.batBAT406 B
timesync.batBAT78 B
‹redacted›.cmdCMD77 B
‹redacted›.cmdCMD61 B
‹redacted›.cmdCMD60 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

121.36.206.152confirmed
176.103.62.56confirmed
190.84.232.232confirmed
38.60.227.210confirmed
45.151.122.34confirmed
89.36.231.178confirmed
1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead
102.203.200.45lead
102.68.86.43lead
103.111.114.29lead