ransomware_infrastructure
Ransomware infrastructure including payload hosting, C2 servers, and data-exfiltration endpoints used by operators like LockBit, BlackCat, or Clop.
Related signatures
Check an IP for this and every other signature.
FFraud returns the exact threat tags on any IP, free and without a key. The confirmed addresses, with their worst category, are also on GitHub as open data.