37.19.210[.]12IP address

Reported by 1 independent source · first reported 21 Sep 2026 by Kaspersky Securelist · last reported 21 Sep 2026

Last reported 1 month ago

What the reports say

1 report, newest first · the exact sentence from each

“37.19.210[.]12”

Kaspersky SecurelistVendor21 Sep 2026
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Indicators reported together

named in the same reports

0108656a3e1ade6ca4f21b084f5e1208in 1 report
bea5e267f24d7da59f6821bffdbff293in 1 report
146.70.117[.]239in 1 report
149.102.229[.]154in 1 report
104.164.55[.]46in 1 report
104.28.162[.]228in 1 report
104.28.163[.]162in 1 report
64.190.76[.]14in 1 report
192.42.116[.]50in 1 report
192.42.116[.]12in 1 report
192.42.116[.]56in 1 report
192.42.116[.]97in 1 report
192.42.116[.]52in 1 report

Copy these 13 indicators · defanged

13 indicators, defanged, one per line

0108656a3e1ade6ca4f21b084f5e1208
bea5e267f24d7da59f6821bffdbff293
146.70.117[.]239
149.102.229[.]154
104.164.55[.]46
104.28.162[.]228
104.28.163[.]162
64.190.76[.]14
192.42.116[.]50
192.42.116[.]12
192.42.116[.]56
192.42.116[.]97
192.42.116[.]52

Thanks — we review every report.

Report a wrong value