Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-16 08:00:47 EDT

PhotosVideosAllPeople
LatestRanked
@infosecbot.bsky.socialOct 15, 2026, 3:03 PM

🚨New Research from @Huntio

A #PaperCut attacker left their #AI exploitation workbench exposed on an #opendir. We got a look inside: agent instructions, exploit code, a second #RCE path, and victims in 45+ countries.

Full…

— from @volrant136 (https://x.com/volrant136/status/2110748461125800230)

Photo, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialOct 13, 2026, 3:12 PM

Time to hunt!

https://huntback.io/ip/185.148.144.99…

#poc #threatintel #opendir

— from @Huntbackio (https://x.com/Huntbackio/status/2110025921306775769)

Photo, no description
@infosecbot.bsky.socialOct 12, 2026, 4:07 PM

Open Dir that's also scanning

https://huntback.io for those who want to check it out.

#opendir #ioc #threatintel

— from @Huntbackio (https://x.com/Huntbackio/status/2109677265642783107)

Photo, no description
@infosecbot.bsky.socialOct 8, 2026, 2:40 PM

⚠️ #malicious #opendir on 23.254.195[.]48

AttackCapture URL: https://portal.hunt.io/ip/23.254.195.48…

Found by @BlinkzSec https://x.com/BlinkzSec/status/2107876110373683261?s=20…

https://Hunt.io shows three opendir on 23.254.195…

— from @Huntio (https://x.com/Huntio/status/2108206020728135734)

Photo, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialOct 7, 2026, 1:45 PM

👿 #malicioius #opendir at fa.windows32[.]men

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=https://fa.windows32.men…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/2105031150032896105?s=…

— from @Huntio (https://x.com/Huntio/status/2107829708612161640)

Photo, no descriptionPhoto, no description
@infosecbot.bsky.socialOct 6, 2026, 3:21 PM

#xworm #opendir at:

http://107.173.143\.44/60

c2: 151.241.154\.23:7007

— from @James_inthe_box (https://x.com/James_inthe_box/status/2107491399730073763)

Photo, no description
@james-inthe-box.infosec.exchange.ap.brid.gyOct 6, 2026, 3:21 PM

#xworm #opendir at:

http://107.173.143\\.44/60

c2: 151.241.154\\.23:7007

Photo, no description
@infosecbot.bsky.socialOct 5, 2026, 5:01 PM

#opendir

cc:@500mk500 @JAMESWT_WT
remcos right?

all files at Reversinglabs

https://urlhaus.abuse.ch/host/64.89.161.65/…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2107154228644893052)

Photo, no description
@infosecbot.bsky.socialOct 1, 2026, 5:29 PM

⚠️ #malicious #opendir hosted at 172.86.85.146[:]9999

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://172.86.85.146:9999…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/2102086668870…

— from @Huntio (https://x.com/Huntio/status/2105711803426603222)

Photo, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 30, 2026, 4:39 PM

👿 #malicious #opendir hosted on 131.123.43.239[:]8123

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://131.123.43.239:8123…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/210484433056…

— from @Huntio (https://x.com/Huntio/status/2105336686162960656)

Photo, no descriptionPhoto, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 28, 2026, 6:31 PM

📂 #malicioius #opendir 172.86.73.169[:]8081

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://172.86.73.169:8081…

Found by @BlinkzSec https://x.com/BlinkzSec/status/2103569032628556053?s=20…

What we…

— from @Huntio (https://x.com/Huntio/status/2104640092883099927)

Photo, no descriptionPhoto, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 28, 2026, 1:56 PM

#remcos #powershell (albeit broken) #opendir at:

https://delphiaonline\.top

c2
dmsi.duckdns\.org:14642

9d9f149a0052999587be2078375bb4530b351f3cda1b343c7f81a5d13b02ac45

— from @James_inthe_box (https://x.com/James_inthe_box/status/2104570898124812499)

Photo, no descriptionPhoto, no descriptionPhoto, no description
@james-inthe-box.infosec.exchange.ap.brid.gySep 28, 2026, 1:56 PM

#remcos #powershell (albeit broken) #opendir at:

https:// delphiaonline\\.top

c2
dmsi\\.duckdns\\.org:14642

9d9f149a0052999587be2078375bb4530b351f3cda1b343c7f81a5d13b02ac45

Photo, no descriptionPhoto, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 25, 2026, 7:35 PM

knock knock @ex_raritas
#opendir
cc: @skocherhan @malwrhunterteam
I uploaded a few things. The screenshot is from the ps1

http://172.86.73/.169:8081/go10.ps1
files on ReversingLabs, Bazaar, and, in some cases, VT

https://ba…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2103569032628556053)

Photo, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 24, 2026, 4:07 PM

#asyncrat #darkcrystal #opendir at:
https://interactions-according-reports-syndication\.trycloudflare.com

https://periods-genetic-stones-government\.trycloudflare.com

— from @James_inthe_box (https://x.com/James_inthe_box/status/2103154466770010137)

Photo, no descriptionPhoto, no description
@james-inthe-box.infosec.exchange.ap.brid.gySep 24, 2026, 4:07 PM

#asyncrat #darkcrystal #opendir at:
https:// interactions-according-reports-syndication\\.trycloudflare.com

https:// periods-genetic-stones-government\\.trycloudflare.com

Photo, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 24, 2026, 9:34 AM

hxxps://fever-recommendations-martha-durable.trycloudflare(.)com/
#WsgiDAV #opendir

— from @smica83 (https://x.com/smica83/status/2103055397221212419)

Photo, no description
@infosecbot.bsky.socialSep 22, 2026, 6:07 PM

a48259951e3a80e00580e9f82899d631
#opendir #CoinMiner

— from @skocherhan (https://x.com/skocherhan/status/2102459892305174774)

Photo, no description
@infosecbot.bsky.socialSep 22, 2026, 8:46 AM

#opendir
http://13.143.247/.180:8080/

s.exe is on reversinglabs, bazaar and VT
https://bazaar.abuse.ch/sample/f2451d7ff46824b81f04d94bad1b4133ca226e3e72b188d4b66c6bcac137a867/…

s.exe: f2451d7ff46824b81f04d94bad1b4133ca226e3e…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2102318495752982573)

Photo, no descriptionPhoto, no description
@infosecbot.bsky.socialSep 18, 2026, 1:35 PM

🚩 #malicious #opendir hosted on on 129.159.135.190

AttackCapture URL: https://portal.hunt.io/attackcapture/reports/v2/129.159.135.190…

Original find by @Yusufcancakiir https://x.com/Yusufcancakiir/status/2098487180494815400?s=20……

— from @Huntio (https://x.com/Huntio/status/2100941909506015402)

Photo, no descriptionPhoto, no descriptionPhoto, no description
Load more