| Supershell | 134.122.207.54:8888/supershell/login/ | 134.122.207.54 | 13-09-2025 |
| HookBot | 195.10.205.181 | 195.10.205.181 | 12-09-2025 |
| Supershell | 8.138.155.217:18888/supershell/login/ | 8.138.155.217 | 11-09-2025 |
| Supershell | 47.99.193.179:8888/supershell/login/ | 47.99.193.179 | 11-09-2025 |
| Amadey | 95.164.53.109/f8nus4b/Login.php | 95.164.53.109 | 11-09-2025 |
| HookBot | 196.251.71.193 | 196.251.71.193 | 09-09-2025 |
| Amadey | 91.238.50.169/f8nus4b/Login.php | 91.238.50.169 | 09-09-2025 |
| Sarwent | 213.165.43.31:8080/login | 213.165.43.31 | 09-09-2025 |
| Unam | 62.60.245.136/pages/login.php | 62.60.245.136 | 09-09-2025 |
| Unam | controlpanel29.com/pages/login.php | 62.60.245.136 | 09-09-2025 |
| PoisonX | 179.43.176.30/login | 179.43.176.30 | 09-09-2025 |
| Spy-Agent | 178.16.54.226/ | 178.16.54.226 | 09-09-2025 |
| Nosviak4 | 51.195.60.102/login | 51.195.60.102 | 09-09-2025 |
| Kaiji | 192.238.128.209:8888/ | 192.238.128.209 | 09-09-2025 |
| CyberStealer | govallrfqrfp.live/webpanel/panel/login.php | 104.21.20.29 | 09-09-2025 |
| HookBot | 150.40.119.238 | 150.40.119.238 | 07-09-2025 |
| HookBot | 79.137.195.252 | 79.137.195.252 | 06-09-2025 |
| HookBot | 77.110.114.16 | 77.110.114.16 | 05-09-2025 |
| Lokibot | electrico.co.zw/putty/five/five/PvqDq929BSx_A_D_M1n_a.php | 176.32.230.3 | 04-09-2025 |
| HookBot | 62.60.179.44 | 62.60.179.44 | 03-09-2025 |
| Amadey | 62.60.227.98/g8jejfC38/Login.php | 62.60.227.98 | 03-09-2025 |
| Amadey | 94.154.35.25:80/di9ku38f/Login.php | 94.154.35.25 | 03-09-2025 |
| HookBot | 91.198.77.151 | 91.198.77.151 | 02-09-2025 |
| Supershell | 134.122.207.42:8888/supershell/login/ | 134.122.207.42 | 02-09-2025 |
| Unam | 62.60.246.234/pages/login.php | 62.60.246.234 | 01-09-2025 |