[
 {
  "value": "65.109.70.162",
  "type": "ipv4",
  "first_seen": "2026-09-02",
  "last_seen": "2026-09-02",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "ransomware-hackers-built-their-own-c2-framework-to-steal-passwor"
  ],
  "sources": [
   "https://cyberpress.org/ransomware-c2-disarms-defenses/"
  ],
  "reason": "C2 infrastructure IP of custom TukTuk C2 framework used by The Gentlemen ransomware group"
 }
]