| Lokibot | ayoobtextlie.com/cup/five/PvqDq929BSx_A_D_M1n_a.php | 45.144.66.74 | 13-02-2020 |
| Lokibot | kimstar.com.vn/.tx/tx/playbook/onelove/PvqDq929BSx_A_D_M1n_a.php | 103.74.123.3 | 13-02-2020 |
| Lokibot | academydea.com/includes/pollux/Panel/five/PvqDq929BSx_A_D_M1n_a.php | 165.227.16.98 | 12-02-2020 |
| ISRStealer | megaeditores.com/fgv/PHP/index.php | 192.185.92.172 | 12-02-2020 |
| Lokibot | phanphucland.com/.tb/playbook/onelove/PvqDq929BSx_A_D_M1n_a.php | 103.74.123.3 | 12-02-2020 |
| Azorult | sw6jshf91sdqg.duckdns.org/panel/admin.php | 38.117.105.138 | 12-02-2020 |
| Predator | f0401489.xsph.ru/login | 141.8.192.151 | 12-02-2020 |
| ParasiteHTTP | mr100.sytes.net/p/login/ | 46.183.223.109 | 11-02-2020 |
| DiamondFox | pecunia110011.at/tspir/index.php | 92.63.197.156 | 11-02-2020 |
| Kpot | 5.8.88.118/llvCjlnmbuFvqnZK/login.php | 5.8.88.118 | 11-02-2020 |
| DiamondFox | vahhav.xyz/wlcd/index.php | 198.27.107.162 | 11-02-2020 |
| Lokibot | blue-airship.com/agutaz/direct/pushin/PvqDq929BSx_A_D_M1n_a.php | 89.208.196.16 | 11-02-2020 |
| Kpot | myehterwallet.top/UJZfOVD59Rue1AtQ/login.php | 47.254.174.146 | 11-02-2020 |
| Azorult | vademics.com/for/panel/admin.php | 198.54.115.175 | 11-02-2020 |
| Lokibot | vlklz.xyz/Atoz/five/PvqDq929BSx_A_D_M1n_a.php | 104.31.89.164 | 11-02-2020 |
| Lokibot | empresadeperu.com/vv/PvqDq929BSx_A_D_M1n_a.php | 192.185.75.206 | 11-02-2020 |
| Lokibot | 184.164.142.217/primthree/logs/omc.php | 184.164.142.217 | 11-02-2020 |
| AgentTesla | bauremediaus.com/login.php | 176.223.136.91 | 11-02-2020 |
| Lokibot | 46.21.147.207/primeight/logs/omc.php | 46.21.147.207 | 10-02-2020 |
| DiamondFox | 130.0.234.234/rew/index.php | 130.0.234.234 | 10-02-2020 |
| Lokibot | beerberv.com/SAMMYWAHALA/PvqDq929BSx_A_D_M1n_a.php | 104.18.39.156 | 10-02-2020 |
| Lokibot | euromopy.tech/etty/black/download/PvqDq929BSx_A_D_M1n_a.php | 89.208.196.16 | 10-02-2020 |
| Azorult | incorporatebelize.org/ant/panel/admin.php | 13.125.164.48 | 10-02-2020 |
| Predator | transcot.site/login | 92.63.192.216 | 10-02-2020 |
| Lokibot | slnsa.trade/Work1/PvqDq929BSx_A_D_M1n_a.php | 104.27.169.180 | 10-02-2020 |