| HookBot | 176.124.206.73 | 176.124.206.73 | 19-10-2025 |
| Kamasers | 45.131.64.67/vst/test.php | 45.131.64.67 | 19-10-2025 |
| Kamasers | 45.131.64.67/vst/dns.php | 45.131.64.67 | 19-10-2025 |
| Supershell | 167.172.107.164:8888/supershell/login/ | 167.172.107.164 | 19-10-2025 |
| Unam | 196.251.114.38/pages/login.php | 196.251.114.38 | 18-10-2025 |
| HookBot | 79.137.196.144 | 79.137.196.144 | 17-10-2025 |
| Amadey | 45.134.26.131/kaWt2QXfpPueNM/Login.php | 45.134.26.131 | 17-10-2025 |
| Supershell | 106.52.154.100:8888/supershell/login/ | 106.52.154.100 | 17-10-2025 |
| Amadey | 91.92.242.225/h9djjcWEfj/Login.php | 91.92.242.225 | 15-10-2025 |
| HookBot | 77.91.69.107:3000 | 77.91.69.107 | 14-10-2025 |
| HookBot | 45.45.218.216 | 45.45.218.216 | 14-10-2025 |
| Supershell | 107.174.64.180:8888/supershell/login/ | 107.174.64.180 | 12-10-2025 |
| Supershell | 47.236.166.45:8888/supershell/login/ | 47.236.166.45 | 12-10-2025 |
| HookBot | 85.192.60.253 | 85.192.60.253 | 11-10-2025 |
| Supershell | 94.103.6.167:8888/supershell/login/ | 94.103.6.167 | 11-10-2025 |
| Amadey | windowsedgeupdater.com/gjs7sdfVSDe/Login.php | 91.224.92.75 | 10-10-2025 |
| Unam | 45.133.73.64:8080/pages/login.php | 45.133.73.64 | 09-10-2025 |
| CyberStealer | 176.65.141.143/ | 176.65.141.143 | 09-10-2025 |
| CyberStealer | cyberv2.live/ | 176.65.141.143 | 09-10-2025 |
| CyberStealer | dorklife.vip/ | 202.148.54.90 | 09-10-2025 |
| HookBot | 185.95.156.22 | 185.95.156.22 | 08-10-2025 |
| Lokibot | 94.154.35.238/sweetwhore/five/PvqDq929BSx_A_D_M1n_a.php | 94.154.35.238 | 07-10-2025 |
| HookBot | 16.16.193.34 | 16.16.193.34 | 07-10-2025 |
| Supershell | 49.113.76.93:8888/supershell/login/ | 49.113.76.93 | 05-10-2025 |
| Supershell | 43.161.221.153:8888/supershell/login/ | 43.161.221.153 | 04-10-2025 |