| Date | IP Address |
| 2018-04-03 | 34.202.185.253 (ClassC) |
| 2018-11-01 | 52.5.106.253 (ClassC) |
| 2018-11-01 | 35.172.112.0 (ClassC) |
| 2019-07-05 | 34.237.175.177 (ClassC) |
| 2019-07-05 | 52.206.203.166 (ClassC) |
| 2021-05-12 | 54.160.70.237 (ClassC) |
| 2021-05-12 | 54.197.194.231 (ClassC) |
| 2024-11-25 | 44.217.151.146 (ClassC) |
| 2025-02-25 | 44.207.72.168 (ClassC) |
| 2025-08-16 | 52.206.149.201 (ClassC) |
| 2025-08-22 | 44.198.217.115 (ClassC) |
| 2025-09-05 | 54.243.143.215 (ClassC) |
| 2025-10-27 | 3.213.74.195 (ClassC) |
| 2025-11-21 | 52.70.239.10 (ClassC) |
| Date | Domain | IP |
| www.ransomware.site | 2024-11-25 | 44.217.151.146 |