12,989 panels tracked Export All CSV
Malware Family URL IP Address First Seen
Supershell screenshot 89.223.95.104:8888/supershell/login/ HK 89.223.95.104 31-01-2026
Unam screenshot 45.88.91.156/pages/login.php US 45.88.91.156 31-01-2026
Supershell screenshot 23.94.61.153:8888/supershell/login/ US 23.94.61.153 31-01-2026
Darkcloud screenshot hsk-new.com/XdFWQSP/login.php DE 158.94.208.190 31-01-2026
Xillen screenshot goldenring.live/pages/login.html 172.67.210.10 30-01-2026
NexusRAT screenshot 5.175.192.109/login NL 5.175.192.109 30-01-2026
Chaos screenshot 217.217.255.48:8080/ ES 217.217.255.48 29-01-2026
Supershell screenshot 8.217.97.238:8888/supershell/login/ HK 8.217.97.238 29-01-2026
Amadey screenshot 91.219.237.175/m4dfhweEw/Login.php HU 91.219.237.175 28-01-2026
Lyra screenshot boostnoise.com/auth 172.67.165.163 27-01-2026
Supershell screenshot 103.43.18.10:8888/supershell/login/ CN 103.43.18.10 26-01-2026
GoGitter screenshot ingov.myartsonline.com/login9875.php BG 185.176.43.108 26-01-2026
Supershell screenshot 151.242.20.14:7788/supershell/login/ IR 151.242.20.14 26-01-2026
Shadow screenshot 5.9.228.188:5000/ DE 5.9.228.188 25-01-2026
Void screenshot voidstealer.net/ CH 179.43.176.91 24-01-2026
Void screenshot 179.43.176.93/ CH 179.43.176.93 24-01-2026
Evelyn screenshot arekinformatika.my.id/ SG 103.138.189.74 24-01-2026
Supershell screenshot 47.95.169.152:8888/supershell/login/ CN 47.95.169.152 23-01-2026
Lyra screenshot 5.196.243.97:3000/auth FR 5.196.243.97 21-01-2026
Tsundere screenshot 91.215.85.42:3001/login RU 91.215.85.42 21-01-2026
Supershell screenshot 101.200.86.142:8888/supershell/login/ CN 101.200.86.142 21-01-2026
Supershell screenshot 89.223.95.83:8888/supershell/login/ HK 89.223.95.83 21-01-2026
C0de screenshot 113.30.151.250/panel/ IT 113.30.151.250 19-01-2026
AgentTesla screenshot etvidanueva.com/photos/images/WebPanel/login.php US 198.187.31.148 18-01-2026
Supershell screenshot 103.246.247.118:8888/supershell/login/ HK 103.246.247.118 18-01-2026