Most high-profile ransomware groups were using the same Russian-based infrastructure for years

source https://www.techradar.com/pro/security/bulletproof-hosting-providers-renting-cheap-infrastructure-to-supply-virtual-machines-to-ransomware-hackers