12,990 panels tracked Export All CSV
Malware Family URL IP Address First Seen
BlueBotNet screenshot web-server.x10.mx/WebPanel/login.php US 198.91.81.14 26-08-2025
CyberStealer screenshot cyber-destroyer.live/webpanel/panel/login.php 104.21.26.22 26-08-2025
CyberStealer screenshot cyber-r7jwnkqlrorjs.live/webpanel/panel/login.php 104.21.42.79 26-08-2025
Fickle screenshot 185.33.86.220/panel/login.php US 185.33.86.220 25-08-2025
Fickle screenshot soft-gets.com/panel/login.php 104.21.80.1 25-08-2025
Fickle screenshot rivatalk.digital/panel/login.php 104.21.62.214 25-08-2025
HookBot screenshot 77.91.66.252 DE 77.91.66.252 25-08-2025
Supershell screenshot 117.72.122.195:8888/supershell/login/ CN 117.72.122.195 25-08-2025
Supershell screenshot 180.76.144.175:8888/supershell/login/ CN 180.76.144.175 25-08-2025
Supershell screenshot 124.221.125.254:8888/supershell/login/ CN 124.221.125.254 25-08-2025
Supershell screenshot 118.195.183.125:8888/supershell/login/ CN 118.195.183.125 25-08-2025
Supershell screenshot 103.146.158.19:8888/supershell/login/ HK 103.146.158.19 25-08-2025
HookBot screenshot 5.101.84.108 RU 5.101.84.108 25-08-2025
HookBot screenshot 64.227.174.203 IN 64.227.174.203 24-08-2025
Supershell screenshot 104.225.234.132:8888/supershell/login/ US 104.225.234.132 24-08-2025
HookBot screenshot 172.94.95.238 US 172.94.95.238 23-08-2025
HookBot screenshot 13.236.179.186 AU 13.236.179.186 23-08-2025
HookBot screenshot 154.36.165.77 US 154.36.165.77 23-08-2025
Supershell screenshot 170.64.217.39:8888/supershell/login/ AU 170.64.217.39 22-08-2025
Castle screenshot 64.52.80.44:9999/login US 64.52.80.44 22-08-2025
Castle screenshot 85.158.108.135:5050/login BG 85.158.108.135 22-08-2025
Supershell screenshot 167.179.104.126:8888/supershell/login/ JP 167.179.104.126 20-08-2025
BQTlock screenshot 92.113.146.56/ DK 92.113.146.56 20-08-2025
Supershell screenshot 47.98.216.119:8888/supershell/login/ CN 47.98.216.119 19-08-2025
Amadey screenshot microsoft-telemetry.cc/cvdfnaFJBmC0/Login.php PA 5.252.153.134 19-08-2025