{
    "id": "1801916",
    "ioc": "91.92.243.111:8041",
    "ioc_type": "ip:port",
    "threat_type": "botnet_cc",
    "malware": "win.remoteadmin",
    "malware_printable": "RemoteAdmin",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-04-29 07:49:20 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/any.run\/report\/8d2e7a0ef5bd863c2052108bfb8ff0b289be633f8d2f5cf8ba12c23389117869\/2fe0c237-8042-45bc-9ff5-3f228131f17a",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1801916",
    "tags": [
        "ConnectWise",
        "fiscal-lure",
        "Flyservers",
        "port-8041",
        "RAT",
        "RMM-abuse",
        "ScreenConnect"
    ]
}