[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftUaH1ys6fhoRyo0GVz5hYaiQn93madux7uUW1EYv_q8":3},{"article":4,"iocs":36,"watch_terms":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":10,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"dc3ed95e-9c16-494a-9b78-6ae9700d6399","\"The IP 195.211.190[.]189 was hosted on infrastructure from Railnet LLC — a legal front for Russi...","the-ip-195-211-190-189-was-hosted-on-infrastructure-from-railnet-llc-a-legal-fro","\"The IP 195.211.190[.]189 was hosted on infrastructure from Railnet LLC — a legal front for Russia-based bulletproof hosting provider Virtualine.\"\n\nFull report 👇\nhttps:\u002F\u002Ft.co\u002FNvMbsfdJyL\n\n#DFIR #Ransomware #ThreatIntel #BlueTeam #CyberSecurity https:\u002F\u002Ft.co\u002FVaCfOiIRFR","Security researchers identified IP 195.211.190.189 as part of infrastructure operated by Railnet LLC, a front company for Russian bulletproof hosting provider Virtualine. This discovery links malicious infrastructure to Russia-based hosting services commonly used to support ransomware and state-sponsored cyber operations.",null,"https:\u002F\u002Fx.com\u002FTheDFIRReport\u002Fstatus\u002F2033957796044009494","2026-03-17T17:25:02+00:00","2026-03-17T18:00:14.665458+00:00",8,[],"e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":16,"icon":10,"name":18,"slug":19},"Threat Intelligence","threat-intelligence",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[37],{"type":38,"value":39,"context":40},"ip","195.211.190.189","Malicious IP hosted on Railnet LLC infrastructure (Russian bulletproof hosting)",[]]