JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.81.132.173

172.81.132.173 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	DataWagon LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27176
Hostname(s)	vmta172.81.132.173.intercom-interactive.com
Domain Name	datawagon.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.81.132.173

Whois 172.81.132.173

IP Abuse Reports for 172.81.132.173:

This IP address has been reported a total of 30 times from 21 distinct sources. 172.81.132.173 was first reported on August 28th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dispaisyenterprises	2026-09-02 01:39:58 (19 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (60 bytes of payload); 5038 [2] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (60 bytes of payload); 5038 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 EGP Abuse Dept	2026-09-02 00:39:53 (20 hours ago)	Scanning for port/service exploits on tpc-052.mach3builders.nl	Port Scan Hacking
🇨🇭 pingusurmars	2026-09-02 00:07:06 (20 hours ago)	Blocked by UFW on amperetwo [5038/tcp] Source port: 58378 TTL: 242 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [5038/tcp] Source port: 58378 TTL: 242 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 schematics.cc	2026-09-01 23:55:10 (20 hours ago)	Blocked by on honeypot2 [5061/tcp] \| SPT: 58378 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [5061/tcp] \| SPT: 58378 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan Fraud VoIP
🇳🇵 radheykrishna.com.np	2026-09-01 13:00:44 (1 day ago)	Sep 1 18:45:44 kernel: [1983813.855446] [UFW BLOCK] IN=ens160 OUT= SRC=172.81.132.173 LEN=44 TOS=0x ... show more Sep 1 18:45:44 kernel: [1983813.855446] [UFW BLOCK] IN=ens160 OUT= SRC=172.81.132.173 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=30150 PROTO=TCP SPT=58378 DPT=5038 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-09-01 12:49:41 (1 day ago)	Blocked by UFW (TCP on 5061) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5061) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 172.81.132.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-01 12:31:11 (1 day ago)	5038/tcp (1 or more attempts)	Port Scan
🇮🇱 Ilop	2026-09-01 00:05:59 (1 day ago)	[v5-99] Port scan: 3 packet(s) from 172.81.132.173 to 3 distinct destination ports (5060,5038,5061) ... show more [v5-99] Port scan: 3 packet(s) from 172.81.132.173 to 3 distinct destination ports (5060,5038,5061) blocked at the perimeter (automated sensor) show less	Port Scan
🇺🇸 xmission.com	2026-08-31 20:48:43 (1 day ago)	Blocked by UFW (TCP on 5038) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5038) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 172.81.132.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-31 19:40:57 (2 days ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
Anonymous	2026-08-31 18:53:40 (2 days ago)	5060/tcp (1 or more attempts)	Port Scan
🇨🇭 pingusurmars	2026-08-31 17:16:16 (2 days ago)	Blocked by UFW on ampereone [5061/tcp] Source port: 58378 TTL: 242 Packet length: 44 TOS: 0x00 This ... show more Blocked by UFW on ampereone [5061/tcp] Source port: 58378 TTL: 242 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 _ArminS_	2026-08-31 16:44:46 (2 days ago)	SP-Scan 58378:5060 detected 2026.08.31 18:44:46 blocked until 2026.10.20 11:47:33	Port Scan
🇺🇸 xmission.com	2026-08-31 16:10:04 (2 days ago)	Blocked by UFW (TCP on 5060) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5060) Source port: 58378 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 172.81.132.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-31 15:38:44 (2 days ago)	Aug 31 10:56:40 localhost kernel: [116533338.832783] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 31 10:56:40 localhost kernel: [116533338.832783] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.81.132.173 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=37504 PROTO=TCP SPT=58378 DPT=5038 WINDOW=1025 RES=0x00 SYN URGP=0 Aug 31 10:56:40 localhost kernel: [116533338.832812] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.81.132.173 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=37504 PROTO=TCP SPT=58378 DPT=5038 SEQ=2269045072 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) Aug 31 11:38:43 localhost kernel: [116535861.708416] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.81.132.173 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=238 ID=60423 PROTO=TCP SPT=58378 DPT=5061 WINDOW=1025 RES=0x00 SYN URGP=0 Aug 31 11:38:43 localhost kernel: [116535861.708439] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.81.132.173 DST=[mung show less	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 134.199.158.149

🇪🇹 196.190.92.28

🇮🇶 185.158.22.150

🇺🇸 162.240.218.183

🇺🇸 162.240.20.137

🇺🇸 147.185.132.138

🇦🇺 134.199.157.182

🇦🇺 134.199.155.108

🇦🇺 134.199.154.255

🇳🇱 93.123.109.192

🇳🇱 45.148.10.152

🇺🇸 172.203.253.160

🇨🇦 159.203.57.242

🇺🇸 139.144.239.98

🇦🇺 134.199.153.184

🇦🇺 134.199.152.230

🇦🇺 134.199.151.126

🇰🇷 118.37.214.187

🇫🇷 91.196.152.21

🇫🇷 51.254.103.32