This IP address has been reported a total of
152
times from
67 distinct
sources.
20.40.253.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
[rede-164-29] 09/02/2026-01:21:22.346683, 20.40.253.42, Protocol: 6, ET CINS Active Threat Intellige ...
show more[rede-164-29] 09/02/2026-01:21:22.346683, 20.40.253.42, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 26
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-02T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-02T06:07:02+0200. Last: 2026-09-02T06:07:02+0200.
Samples:
- 2026-08-30 00:34:34,681 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 20.40.253.42
show less
"Found User-Agent associated with security scanner - Matched Data: zgrab found within REQUEST_HEADER ...
show more"Found User-Agent associated with security scanner - Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"
show less
Web App Attack
Anonymous
2026-09-02T05:35:28.226884+02:00 vps kernel: [4690943.980063] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-09-02T05:35:28.226884+02:00 vps kernel: [4690943.980063] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=20.40.253.42 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=45609 PROTO=TCP SPT=55789 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Blocked by UFW (TCP on 9200)
Source port: 38138
TTL: 51
Packet length: 52
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 9200)
Source port: 38138
TTL: 51
Packet length: 52
TOS: 0x00
This report (for 20.40.253.42) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-02T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-02T01:07:01+0200. Last: 2026-09-02T01:07:01+0200.
Samples:
- 2026-08-30 00:34:34,681 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 20.40.253.42
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=20.40.253.42; proto=TCP; source_port=50872; target_port=8098; flags=SYN
show less