Hello, Mohammed Askar1
Welcome to the Microsoft Community.
Hello, thank you for your feedback. It seems that you have observed an IP address in the firewall log that is associated with an abnormal ransomware organization.
You have found many important clues. I think you need to block this IP address, and the best advice is that you can call your local police station to report this situation.
Best regards
Bobhe | Microsoft Community Support Specialist