indicatorip
185[.]189[.]13[.]56
- First seen
- 2026-05-19
- Last seen
- 2026-05-19
- Sightings
- 1
Posts referencing this indicator
- WantToCry ransomware remotely encrypts files
Russia-based attacker-controlled IP used to establish SMB sessions for remote encryption.