JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.40.221.42

58.40.221.42 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.40.221.42

Whois 58.40.221.42

IP Abuse Reports for 58.40.221.42:

This IP address has been reported a total of 9 times from 7 distinct sources. 58.40.221.42 was first reported on July 26th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 f-d-m	2026-06-07 23:08:00 (4 months ago)	ssh-bruteforce/k3	Brute-Force SSH
🇧🇩 sakibmas	2026-06-06 13:11:11 (4 months ago)	2026-06-06T19:10:53.680114+06:00 fs sshd[534934]: Failed password for root from 58.40.221.42 port 20 ... show more 2026-06-06T19:10:53.680114+06:00 fs sshd[534934]: Failed password for root from 58.40.221.42 port 2058 ssh2 2026-06-06T19:11:10.790721+06:00 fs sshd[534936]: Invalid user dummy from 58.40.221.42 port 2059 ... show less	Brute-Force SSH
🇧🇩 sakibmas	2026-06-06 11:54:02 (4 months ago)	2026-06-06T17:53:59.104188+06:00 fs sshd[533662]: pam_unix(sshd:auth): authentication failure; logna ... show more 2026-06-06T17:53:59.104188+06:00 fs sshd[533662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.40.221.42 user=root 2026-06-06T17:54:01.415100+06:00 fs sshd[533662]: Failed password for root from 58.40.221.42 port 2054 ssh2 ... show less	Brute-Force SSH
🇮🇩 asrarakhair	2026-05-25 05:01:51 (4 months ago)	(sshd) Failed SSH login from 58.40.221.42 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction ... show more (sshd) Failed SSH login from 58.40.221.42 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-05-25T13:01:28.205971+08:00 localhost sshd[1803681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.40.221.42 user=root 2026-05-25T13:01:30.385905+08:00 localhost sshd[1803681]: Failed password for root from 58.40.221.42 port 2049 ssh2 2026-05-25T13:01:42.136309+08:00 localhost sshd[1803776]: Invalid user andrey from 58.40.221.42 port 2050 2026-05-25T13:01:42.382774+08:00 localhost sshd[1803776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.40.221.42 2026-05-25T13:01:44.152145+08:00 localhost sshd[1803776]: Failed password for invalid user andrey from 58.40.221.42 port 2050 ssh2 show less	Brute-Force SSH
🇭🇰 sthoyer.de	2024-07-27 16:51:04 (2 years ago)	Jul 27 18:50:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d: ... show more Jul 27 18:50:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=58.40.221.42 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=60228 PROTO=TCP SPT=49746 DPT=23 WINDOW=55626 RES=0x00 SYN URGP=0 Jul 27 18:50:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=58.40.221.42 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=60228 PROTO=TCP SPT=49746 DPT=23 WINDOW=55626 RES=0x00 SYN URGP=0 Jul 27 18:51:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=58.40.221.42 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=60228 PROTO=TCP SPT=49746 DPT=23 WINDOW=55626 RES=0x00 SYN URGP=0 Jul 27 18:51:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=58.40.221.42 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=60228 PROTO=TCP SPT=49746 DPT=2323 WINDOW=55626 RES=0x00 SYN UR ... show less	Port Scan
🇺🇸 RAP	2024-07-27 12:33:19 (2 years ago)	2024-07-27 12:33:19 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2024-07-27 11:53:58 (2 years ago)	Port Scan Attack proto:TCP src:57209 dst:23	Port Scan
Anonymous	2024-07-27 10:22:28 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 RAP	2024-07-26 18:03:11 (2 years ago)	2024-07-26 18:03:11 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 193.163.89.26

🇺🇸 129.121.142.174

🇺🇸 65.49.1.179

🇬🇧 35.203.211.74

🇩🇪 34.32.30.152

🇺🇸 184.186.76.217

🇺🇸 122.8.45.111

🇰🇼 78.89.154.59

🇮🇳 66.116.253.148

🇺🇸 65.49.1.178

🇺🇸 65.49.1.171

🇧🇷 45.238.202.134

🇩🇪 2003:ee:870e:bb08:80b2:ef55:3a5a:6715

🇩🇪 167.94.146.59

🇩🇪 167.94.146.51

🇸🇬 154.18.238.98

🇺🇸 147.182.168.62

🇯🇵 104.46.209.135

🇸🇦 95.184.8.237

🇬🇧 81.19.219.253