JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.242.165

91.92.242.165 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.242.165

Whois 91.92.242.165

IP Abuse Reports for 91.92.242.165:

This IP address has been reported a total of 9 times from 6 distinct sources. 91.92.242.165 was first reported on November 3rd 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MeduzaCTI	2026-02-19 21:21:35 (3 months ago)	Indicator Report Indicator: 91.92.242.165 Reporter: HeatherM Description: DcRAT C2 Found Tags: RAT, ... show more Indicator Report Indicator: 91.92.242.165 Reporter: HeatherM Description: DcRAT C2 Found Tags: RAT,DcRat,C2 Source: MeduzaCTI Platform Reference: https://meduzacti.com show less	Hacking
🇨🇴 SOC_ONV	2026-02-03 13:18:00 (4 months ago)	91.92.242.165 SHA256 Phishing: e61f826d6bf1d69a9f03e8f4b002969d36736311d88cce7d9fe46c62e748be34 "C: ... show more 91.92.242.165 SHA256 Phishing: e61f826d6bf1d69a9f03e8f4b002969d36736311d88cce7d9fe46c62e748be34 "C:\Users\admin\AppData\Local\Temp\Rar$EXb2764.11698\Documento_oficial_Bancolombia_02_FeB_2026.exe" show less	Phishing Email Spam Web App Attack
🇿🇦 Tokolosh Hunters	2026-02-03 08:29:58 (4 months ago)	threat intel 3-2-2026 vf	Brute-Force
🇮🇷 ModiranHost.com	2024-09-28 10:26:05 (1 year ago)	Sep 28 13:56:03 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=91.92.242.165 DST=[REMOVED].152.80 LE ... show more Sep 28 13:56:03 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=91.92.242.165 DST=[REMOVED].152.80 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=49676 PROTO=TCP SPT=59163 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇳 ThreatBook.io	2023-11-07 06:27:51 (2 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/91.92.242.165	SSH
🇨🇳 actars	2023-11-06 21:20:51 (2 years ago)	2023-11-07T05:20:48.589481+08:00 localhost sshd[371693]: Invalid user zytong from 91.92.242.165 port ... show more 2023-11-07T05:20:48.589481+08:00 localhost sshd[371693]: Invalid user zytong from 91.92.242.165 port 60438 2023-11-07T05:20:48.589481+08:00 localhost sshd[371693]: Invalid user zytong from 91.92.242.165 port 60438 2023-11-07T05:20:48.841091+08:00 localhost sshd[371693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.242.165 2023-11-07T05:20:50.731080+08:00 localhost sshd[371693]: Failed password for invalid user zytong from 91.92.242.165 port 60438 ssh2 2023-11-07T05:20:48.841091+08:00 localhost sshd[371693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.242.165 2023-11-07T05:20:50.731080+08:00 localhost sshd[371693]: Failed password for invalid user zytong from 91.92.242.165 port 60438 ssh2 ... show less	Brute-Force SSH
🇨🇳 actars	2023-11-06 20:16:39 (2 years ago)	2023-11-07T04:16:13.310938+08:00 localhost sshd[371449]: Invalid user test from 91.92.242.165 port 4 ... show more 2023-11-07T04:16:13.310938+08:00 localhost sshd[371449]: Invalid user test from 91.92.242.165 port 45586 2023-11-07T04:16:13.562593+08:00 localhost sshd[371449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.242.165 2023-11-07T04:16:15.147256+08:00 localhost sshd[371449]: Failed password for invalid user test from 91.92.242.165 port 45586 ssh2 2023-11-07T04:16:36.470306+08:00 localhost sshd[371455]: Invalid user hello from 91.92.242.165 port 53018 2023-11-07T04:16:36.719701+08:00 localhost sshd[371455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.242.165 2023-11-07T04:16:38.795925+08:00 localhost sshd[371455]: Failed password for invalid user hello from 91.92.242.165 port 53018 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-11-05 06:18:58 (2 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/91.92.242.165	SSH
🇨🇳 ThreatBook.io	2023-11-03 06:46:14 (2 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/91.92.242.165	SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.212

🇺🇸 68.183.169.237

🇩🇪 213.209.159.238

🇲🇰 188.44.20.33

🇲🇾 175.139.72.84

🇳🇴 141.195.8.205

🇺🇸 136.144.43.45

🇮🇳 128.185.33.241

🇨🇳 111.61.176.58

🇻🇳 103.189.208.13

🇳🇱 93.123.72.183

🇨🇦 85.217.149.28

🇮🇳 27.123.111.110

🇬🇧 8.208.95.68

🇰🇷 211.253.37.225

🇵🇰 103.174.5.146

🇮🇳 103.25.47.94

🇺🇸 86.48.224.4

🇨🇦 85.217.149.48

🇰🇷 3.38.216.38