[
 {
  "value": "91.92.242.30",
  "type": "ipv4",
  "first_seen": "2026-08-20",
  "last_seen": "2026-08-20",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "openclaw-novastealer-attacks-target-60-crypto-wallets-ssh-keys-a"
  ],
  "sources": [
   "https://cyberpress.org/novastealer-targets-crypto-wallets/"
  ],
  "reason": "NovaStealer payload download IP in ClawHavoc/OpenClaw supply-chain campaign"
 }
]