Live findsCVE IntelConsoleStart free
huntback / IP intelligence

67.215.232.25

DATACENTERoperator-submittedexploitmalwareopen-directorype-binary

Intelligence

ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 1337, 5000, 8080
Loot harvested15 file(s), 4292 KB · exploit, malware, pe-binary

Open directory contents (15)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
NtApiDotNet.dllPE2.7 MB
Rubeus.exePE503 KB
SweetPotato.exePE187 KB
RoguePotato.exePE155 KB
jp.exePE150 KB
CVE-2026-20817_PoC.exePE145 KB
‹redacted›.aspASP125 KB
RogueOxidResolver.exePE124 KB
g.exeEXE56 KB
e.exePE44 KB
p.exeEXE26 KB
ep.exePE17 KB
SharpSuccessor.exePE13 KB
cmd_exece.dllPE4 KB
‹redacted›.aspxASPX1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

121.36.206.152confirmed
15.188.163.78confirmed
158.247.218.226confirmed
212.232.23.75confirmed
38.60.227.210confirmed
51.159.21.191confirmed
8.133.234.121confirmed
87.251.64.224confirmed
95.179.212.2confirmed