| HookBot |  89.23.103.208 | 89.23.103.208 | 05-03-2024 |
| Lokibot |  sempersim.su/c11/PvqDq929BSx_A_D_M1n_a.php | 104.237.252.14 | 05-03-2024 |
| Lokibot |  sempersim.su/c12/PvqDq929BSx_A_D_M1n_a.php | 104.237.252.14 | 05-03-2024 |
| HookBot |  107.148.37.67 | 107.148.37.67 | 05-03-2024 |
| Amadey |  91.92.242.139/Pneh2sXQk0/Login.php | 91.92.242.139 | 04-03-2024 |
| HookBot |  45.145.42.229 | 45.145.42.229 | 04-03-2024 |
| Risepro |  185.221.198.67:8081/login | 185.221.198.67 | 04-03-2024 |
| AgentTesla |  originwealth.ydns.eu/sew/login.php | 78.41.139.12 | 04-03-2024 |
| Risepro |  193.233.132.194:8081/login | 193.233.132.194 | 03-03-2024 |
| Risepro |  193.233.132.113:8081/login | 193.233.132.113 | 03-03-2024 |
| Supershell |  180.184.74.125:8888/supershell/login/ | 180.184.74.125 | 03-03-2024 |
| AgentTesla |  pushkinorigin.ydns.eu/wiz/login.php | 91.92.243.114 | 03-03-2024 |
| Supershell |  137.220.197.175:8888/supershell/login/ | 137.220.197.175 | 03-03-2024 |
| Supershell |  137.220.197.236:8888/supershell/login/ | 137.220.197.236 | 02-03-2024 |
| HookBot |  103.114.163.214 | 103.114.163.214 | 02-03-2024 |
| Supershell |  39.105.213.32:8888/supershell/login/ | 39.105.213.32 | 29-02-2024 |
| Supershell |  106.54.207.116:8888/supershell/login/ | 106.54.207.116 | 29-02-2024 |
| Risepro |  193.233.132.10:8081/login | 193.233.132.10 | 29-02-2024 |
| Risepro |  193.233.132.48:8081/login | 193.233.132.48 | 29-02-2024 |
| Supershell |  23.251.37.231:8888/supershell/login/ | 23.251.37.231 | 29-02-2024 |
| Supershell |  43.229.115.106:8888/supershell/login/ | 43.229.115.106 | 28-02-2024 |
| Risepro |  107.155.112.166:8081/login | 107.155.112.166 | 28-02-2024 |
| Risepro |  213.183.63.187:8081/login | 213.183.63.187 | 28-02-2024 |
| Risepro |  194.33.191.159:8081/login | 194.33.191.159 | 28-02-2024 |
| HookBot |  91.142.74.218 | 91.142.74.218 | 27-02-2024 |
