I've never seen square brackets used like that around a dot in an IPv4. Spent a while reading whether it was even valid to finds out it's not!

Apparently this is added by the writer/editor of the news article so that the malicious IP does not get hyperlinked so that nobody clicks it by accident.