JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.116.63

161.97.116.63 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 28%: ?

28%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2825141.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.116.63

Whois 161.97.116.63

IP Abuse Reports for 161.97.116.63:

This IP address has been reported a total of 44 times from 4 distinct sources. 161.97.116.63 was first reported on June 1st 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-07-23 15:45:29 (21 hours ago)	161.97.116.63 - - [23/Jul/2026:10:45:19 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" ... show more 161.97.116.63 - - [23/Jul/2026:10:45:19 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [23/Jul/2026:10:45:21 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [23/Jul/2026:10:45:22 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [23/Jul/2026:10:45:26 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [23/Jul/2026:10:45:28 -0500] "CONNECT chromewebstore.google.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 demonsword	2026-07-23 13:23:49 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: request.countbot.win:443:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-07-21 22:58:54 (2 days ago)	161.97.116.63 - - [21/Jul/2026:17:58:49 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" ... show more 161.97.116.63 - - [21/Jul/2026:17:58:49 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [21/Jul/2026:17:58:51 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [21/Jul/2026:17:58:51 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [21/Jul/2026:17:58:52 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [21/Jul/2026:17:58:53 -0500] "CONNECT richup.io:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-07-19 17:11:10 (4 days ago)	161.97.116.63 - - [19/Jul/2026:12:11:02 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 " ... show more 161.97.116.63 - - [19/Jul/2026:12:11:02 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [19/Jul/2026:12:11:04 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [19/Jul/2026:12:11:05 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [19/Jul/2026:12:11:06 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [19/Jul/2026:12:11:09 -0500] "CONNECT high.bucketta.sg:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 SentinalX by uzumaru	2026-07-19 06:35:45 (5 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: bekasikota.go.id:443:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-07-17 13:12:01 (1 week ago)	161.97.116.63 - - [17/Jul/2026:08:11:58 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" " ... show more 161.97.116.63 - - [17/Jul/2026:08:11:58 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [17/Jul/2026:08:11:59 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [17/Jul/2026:08:11:59 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [17/Jul/2026:08:11:59 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [17/Jul/2026:08:12:00 -0500] "CONNECT autorola.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-07-16 12:45:56 (1 week ago)	161.97.116.63 - - [16/Jul/2026:07:45:44 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" ... show more 161.97.116.63 - - [16/Jul/2026:07:45:44 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [16/Jul/2026:07:45:50 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [16/Jul/2026:07:45:51 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [16/Jul/2026:07:45:52 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [16/Jul/2026:07:45:55 -0500] "CONNECT panel-private.gixsz.biz.id:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-07-11 08:43:06 (1 week ago)	161.97.116.63 - - [11/Jul/2026:03:42:57 -0500] "CONNECT stake.com:443 HTTP/1.1" 403 344 "-" "-" 161. ... show more 161.97.116.63 - - [11/Jul/2026:03:42:57 -0500] "CONNECT stake.com:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [11/Jul/2026:03:42:57 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [11/Jul/2026:03:42:57 -0500] "CONNECT stake.com:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [11/Jul/2026:03:42:57 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [11/Jul/2026:03:43:05 -0500] "CONNECT stake.com:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 demonsword	2026-07-10 08:41:33 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: crypto.com:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-07-10 08:40:05 (2 weeks ago)	161.97.116.63 - - [10/Jul/2026:03:40:03 -0500] "CONNECT monzo.com:443 HTTP/1.1" 403 344 "-" "-" 161. ... show more 161.97.116.63 - - [10/Jul/2026:03:40:03 -0500] "CONNECT monzo.com:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [10/Jul/2026:03:40:03 -0500] "CONNECT monzo.com:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [10/Jul/2026:03:40:03 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [10/Jul/2026:03:40:03 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [10/Jul/2026:03:40:04 -0500] "CONNECT monzo.com:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-07-08 11:46:26 (2 weeks ago)	161.97.116.63 - - [08/Jul/2026:06:46:22 -0500] "CONNECT breached.su:443 HTTP/1.1" 403 344 "-" "-" 16 ... show more 161.97.116.63 - - [08/Jul/2026:06:46:22 -0500] "CONNECT breached.su:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [08/Jul/2026:06:46:22 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [08/Jul/2026:06:46:24 -0500] "CONNECT breached.su:443 HTTP/1.1" 403 344 "-" "-" 161.97.116.63 - - [08/Jul/2026:06:46:24 -0500] "\x16\x03\x01" 400 392 "-" "-" 161.97.116.63 - - [08/Jul/2026:06:46:25 -0500] "CONNECT breached.su:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 demonsword	2026-07-08 10:20:46 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: manus.im:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-07 10:00:53 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.kitkat.co.id:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-07-07 07:48:51 (2 weeks ago)	161.97.116.63 - - [07/Jul/2026:02:48:31 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" ... show more 161.97.116.63 - - [07/Jul/2026:02:48:31 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [07/Jul/2026:02:48:32 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [07/Jul/2026:02:48:39 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [07/Jul/2026:02:48:42 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [07/Jul/2026:02:48:50 -0500] "CONNECT zeiinhub.my.id:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-07-06 05:14:59 (2 weeks ago)	161.97.116.63 - - [06/Jul/2026:00:14:52 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 ... show more 161.97.116.63 - - [06/Jul/2026:00:14:52 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [06/Jul/2026:00:14:52 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [06/Jul/2026:00:14:56 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [06/Jul/2026:00:14:56 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 392 "-" "-" 161.97.116.63 - - [06/Jul/2026:00:14:58 -0500] "CONNECT stitch.withgoogle.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇺🇸 209.145.51.174

🇵🇱 157.22.125.171

🇨🇳 113.250.177.24

🇺🇸 71.163.140.60

🇨🇦 165.227.39.235

🇵🇰 154.208.61.195

🇦🇴 154.116.254.157

🇫🇷 147.135.213.218

🇨🇳 119.250.166.47

🇰🇷 119.209.12.20

🇹🇼 111.70.23.248

🇳🇱 91.92.47.123

🇮🇳 49.204.74.149

🇳🇱 45.156.128.10

🇺🇸 2602:fa59:10:c44::1

🇯🇵 203.25.124.72

🇯🇵 203.25.124.3

🇮🇷 193.151.145.198

🇺🇦 185.151.85.11