| Meduza | 146.70.161.13/auth/login | 146.70.161.13 | 26-10-2023 |
| Meduza | 193.233.133.81/auth/login | 193.233.133.81 | 26-10-2023 |
| Supershell | 163.197.247.175:8888/supershell/login/ | 163.197.247.175 | 26-10-2023 |
| Lokibot | jinodoplacecam.viewdns.net:7486/powellibvfg/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 185.216.71.238 | 25-10-2023 |
| Amos | onlyfor.pro/ | 172.67.177.191 | 25-10-2023 |
| Risepro | 43.128.18.131:8081/login | 43.128.18.131 | 25-10-2023 |
| Risepro | 45.153.242.188:8081/login | 45.153.242.188 | 25-10-2023 |
| Risepro | 194.169.175.113:8081/login | 194.169.175.113 | 25-10-2023 |
| Risepro | 95.214.27.231:8081/login | 95.214.27.231 | 24-10-2023 |
| Risepro | 109.107.182.9:8081/login | 109.107.182.9 | 24-10-2023 |
| Risepro | 45.81.39.247:8081/login | 45.81.39.247 | 24-10-2023 |
| Lokibot | jay.ransomproducts.top/_errorpages/jay/five/PvqDq929BSx_A_D_M1n_a.php | 104.21.51.81 | 24-10-2023 |
| Supershell | 47.94.158.69:8888/supershell/login/ | 47.94.158.69 | 24-10-2023 |
| AgentTesla | cloudhost.myfirewall.org:2180/xlsx/login.php | 79.110.48.151 | 23-10-2023 |
| Mystic | 193.233.255.73/login/?next=/ | 193.233.255.73 | 23-10-2023 |
| Mystic | 193.233.255.73/login | 193.233.255.73 | 23-10-2023 |
| Supershell | 139.199.212.224:8888/supershell/login/ | 139.199.212.224 | 22-10-2023 |
| Supershell | 142.171.7.195/supershell/login/ | 142.171.7.195 | 22-10-2023 |
| Supershell | 81.68.98.217:8888/supershell/login/ | 81.68.98.217 | 22-10-2023 |
| Mystic | 81.161.229.236/login/?next=/ | 81.161.229.236 | 22-10-2023 |
| Mystic | 94.156.6.75/login/?next=/ | 94.156.6.75 | 21-10-2023 |
| Mystic | 89.187.189.193/login/?next=/ | 89.187.189.193 | 21-10-2023 |
| Vshell | 47.115.230.18:8098/login/index | 47.115.230.18 | 21-10-2023 |
| Risepro | 94.142.138.143:8081/login | 94.142.138.143 | 20-10-2023 |
| Amadey | 193.42.33.7/mbSDvj3/Login.php | 193.42.33.7 | 19-10-2023 |