[
 {
  "value": "45.131.66.106",
  "type": "ipv4",
  "first_seen": "2026-07-01",
  "last_seen": "2026-07-01",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "jadepuffer-agentic-ransomware-first-documented-ai-agent-driven-e"
  ],
  "sources": [
   "https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion"
  ],
  "reason": "C2 IP in JadePuffer agentic ransomware attack"
 },
 {
  "value": "64.20.53.230",
  "type": "ipv4",
  "first_seen": "2026-07-01",
  "last_seen": "2026-07-01",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "jadepuffer-agentic-ransomware-first-documented-ai-agent-driven-e"
  ],
  "sources": [
   "https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion"
  ],
  "reason": "Staging server in JadePuffer agentic ransomware attack"
 }
]