Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-10 01:38:52 EDT

Explore

PostsPeople
LatestRanked
@infosecbot.bsky.socialOct 8, 2026, 2:40 PM

⚠️ #malicious #opendir on 23.254.195[.]48

AttackCapture URL: https://portal.hunt.io/ip/23.254.195.48…

Found by @BlinkzSec https://x.com/BlinkzSec/status/2107876110373683261?s=20…

https://Hunt.io shows three opendir on 23.254.195…

— from @Huntio (https://x.com/Huntio/status/2108206020728135734)

@infosecbot.bsky.socialOct 7, 2026, 1:45 PM

👿 #malicioius #opendir at fa.windows32[.]men

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=https://fa.windows32.men…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/2105031150032896105?s=…

— from @Huntio (https://x.com/Huntio/status/2107829708612161640)

@infosecbot.bsky.socialOct 6, 2026, 3:21 PM

#xworm #opendir at:

http://107.173.143\.44/60

c2: 151.241.154\.23:7007

— from @James_inthe_box (https://x.com/James_inthe_box/status/2107491399730073763)

@james-inthe-box.infosec.exchange.ap.brid.gyOct 6, 2026, 3:21 PM

#xworm #opendir at:

http://107.173.143\\.44/60

c2: 151.241.154\\.23:7007

@infosecbot.bsky.socialOct 5, 2026, 5:01 PM

#opendir

cc:@500mk500 @JAMESWT_WT
remcos right?

all files at Reversinglabs

https://urlhaus.abuse.ch/host/64.89.161.65/…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2107154228644893052)

@infosecbot.bsky.socialOct 1, 2026, 5:29 PM

⚠️ #malicious #opendir hosted at 172.86.85.146[:]9999

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://172.86.85.146:9999…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/2102086668870…

— from @Huntio (https://x.com/Huntio/status/2105711803426603222)

@infosecbot.bsky.socialSep 30, 2026, 4:39 PM

👿 #malicious #opendir hosted on 131.123.43.239[:]8123

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://131.123.43.239:8123…

Found by @malwrhunterteam https://x.com/malwrhunterteam/status/210484433056…

— from @Huntio (https://x.com/Huntio/status/2105336686162960656)

@infosecbot.bsky.socialSep 28, 2026, 6:31 PM

📂 #malicioius #opendir 172.86.73.169[:]8081

AttackCapture URL: https://portal.hunt.io/attackcapture/filemanager?host=http://172.86.73.169:8081…

Found by @BlinkzSec https://x.com/BlinkzSec/status/2103569032628556053?s=20…

What we…

— from @Huntio (https://x.com/Huntio/status/2104640092883099927)

@infosecbot.bsky.socialSep 28, 2026, 1:56 PM

#remcos #powershell (albeit broken) #opendir at:

https://delphiaonline\.top

c2
dmsi.duckdns\.org:14642

9d9f149a0052999587be2078375bb4530b351f3cda1b343c7f81a5d13b02ac45

— from @James_inthe_box (https://x.com/James_inthe_box/status/2104570898124812499)

@james-inthe-box.infosec.exchange.ap.brid.gySep 28, 2026, 1:56 PM

#remcos #powershell (albeit broken) #opendir at:

https:// delphiaonline\\.top

c2
dmsi\\.duckdns\\.org:14642

9d9f149a0052999587be2078375bb4530b351f3cda1b343c7f81a5d13b02ac45

@infosecbot.bsky.socialSep 25, 2026, 7:35 PM

knock knock @ex_raritas
#opendir
cc: @skocherhan @malwrhunterteam
I uploaded a few things. The screenshot is from the ps1

http://172.86.73/.169:8081/go10.ps1
files on ReversingLabs, Bazaar, and, in some cases, VT

https://ba…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2103569032628556053)

@infosecbot.bsky.socialSep 24, 2026, 4:07 PM

#asyncrat #darkcrystal #opendir at:
https://interactions-according-reports-syndication\.trycloudflare.com

https://periods-genetic-stones-government\.trycloudflare.com

— from @James_inthe_box (https://x.com/James_inthe_box/status/2103154466770010137)

@james-inthe-box.infosec.exchange.ap.brid.gySep 24, 2026, 4:07 PM

#asyncrat #darkcrystal #opendir at:
https:// interactions-according-reports-syndication\\.trycloudflare.com

https:// periods-genetic-stones-government\\.trycloudflare.com

@infosecbot.bsky.socialSep 24, 2026, 9:34 AM

hxxps://fever-recommendations-martha-durable.trycloudflare(.)com/
#WsgiDAV #opendir

— from @smica83 (https://x.com/smica83/status/2103055397221212419)

@infosecbot.bsky.socialSep 22, 2026, 6:07 PM

a48259951e3a80e00580e9f82899d631
#opendir #CoinMiner

— from @skocherhan (https://x.com/skocherhan/status/2102459892305174774)

@infosecbot.bsky.socialSep 22, 2026, 8:46 AM

#opendir
http://13.143.247/.180:8080/

s.exe is on reversinglabs, bazaar and VT
https://bazaar.abuse.ch/sample/f2451d7ff46824b81f04d94bad1b4133ca226e3e72b188d4b66c6bcac137a867/…

s.exe: f2451d7ff46824b81f04d94bad1b4133ca226e3e…

— from @BlinkzSec (https://x.com/BlinkzSec/status/2102318495752982573)

@infosecbot.bsky.socialSep 18, 2026, 1:35 PM

🚩 #malicious #opendir hosted on on 129.159.135.190

AttackCapture URL: https://portal.hunt.io/attackcapture/reports/v2/129.159.135.190…

Original find by @Yusufcancakiir https://x.com/Yusufcancakiir/status/2098487180494815400?s=20……

— from @Huntio (https://x.com/Huntio/status/2100941909506015402)

@infosecbot.bsky.socialSep 13, 2026, 1:15 PM

New #threatintel research using @Huntio 🔥

Two exposed #opendir revealed targeting #Vietnamese & #Pakistani government/military infrastructure, NDU, #Mexican systems, and self-hosted #LLM gateways.

Link: https://infrahunter…

— from @volrant136 (https://x.com/volrant136/status/2099124721589895358)

@infosecbot.bsky.socialSep 9, 2026, 9:42 AM

example.org/#opendir

— from @KimZetter (https://x.com/carol/status/103)

@infosecbot.bsky.socialSep 9, 2026, 9:42 AM

#opendir only in the quote

— from @KimZetter (https://x.comhttps://x.com/bob/status/102?s=20)

Load more