13,010 panels tracked Export All CSV
Malware Family URL IP Address First Seen
Supershell screenshot 182.16.21.134:8888/supershell/login/ HK 182.16.21.134 25-05-2025
Supershell screenshot 115.190.31.168:8888/supershell/login/ CN 115.190.31.168 25-05-2025
HookBot screenshot 45.204.193.80:50555 MU 45.204.193.80 24-05-2025
HookBot screenshot 213.209.150.192:50555 DE 213.209.150.192 24-05-2025
HookBot screenshot 196.251.86.58 SC 196.251.86.58 24-05-2025
HookBot screenshot 166.88.225.57 BZ 166.88.225.57 24-05-2025
Unam screenshot 193.106.196.240/pages/login.php TR 193.106.196.240 24-05-2025
Supershell screenshot 103.97.128.128:8888/supershell/login/ CN 103.97.128.128 22-05-2025
Lumma screenshot fedor-dostoevskiy.com/login 104.21.32.1 22-05-2025
Lumma screenshot yuriy-andropov.com/login 104.21.23.142 22-05-2025
HookBot screenshot 176.65.140.224 DE 176.65.140.224 22-05-2025
Amadey screenshot 77.83.207.69/rob75u9v/Login.php HK 77.83.207.69 22-05-2025
Chaos screenshot 141.147.108.142/ GB 141.147.108.142 21-05-2025
Lokibot screenshot 94.156.177.41/droid/five/PvqDq929BSx_A_D_M1n_a.php BG 94.156.177.41 20-05-2025
Supershell screenshot 8.218.254.239:8888/supershell/login/ HK 8.218.254.239 20-05-2025
Lokibot screenshot 94.156.177.41/ugop/five/PvqDq929BSx_A_D_M1n_a.php BG 94.156.177.41 20-05-2025
Chaos screenshot 34.141.142.28:8080/ NL 34.141.142.28 18-05-2025
Unam screenshot 103.251.164.121/pages/login.php NL 103.251.164.121 17-05-2025
HookBot screenshot 176.65.140.223 DE 176.65.140.223 17-05-2025
HookBot screenshot 45.141.233.43:50555 BG 45.141.233.43 17-05-2025
Supershell screenshot 45.192.164.238:8888/supershell/login/ HK 45.192.164.238 16-05-2025
Unam screenshot 194.15.36.219/pages/login.php DE 194.15.36.219 16-05-2025
HookBot screenshot 156.238.245.37:50555 US 156.238.245.37 16-05-2025
HookBot screenshot 141.98.6.13 US 141.98.6.13 15-05-2025
HookBot screenshot 206.206.126.216 SG 206.206.126.216 14-05-2025