Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Comcast Cable Communications LLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Lines containing failures of 50.197.210.138
Apr  5 22:52:34 shared03 postfix/smtpd[920]: connect from 50-197-210-138-static.hfc.comcastbusiness.net[50.197.210.138]
Apr  5 22:52:35 shared03 policyd-spf[7695]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=50.197.210.138; helo=50-197-210-138-static.hfc.comcastbusiness.net; envelope-from=x@x
Apr x@x
Apr  5 22:52:35 shared03 postfix/smtpd[920]: lost connection after RCPT from 50-197-210-138-static.hfc.comcastbusiness.net[50.197.210.138]
Apr  5 22:52:35 shared03 postfix/smtpd[920]: disconnect from 50-197-210-138-static.hfc.comcastbusiness.net[50.197.210.138] ehlo=1 mail=1 rcpt=0/1 commands=2/3
Apr  6 04:49:13 shared03 postfix/smtpd[10374]: connect from 50-197-210-138-static.hfc.comcastbusiness.net[50.197.210.138]
Apr  6 04:49:15 shared03 policyd-spf[12959]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=50.197.210.138; helo=50-197-210-138-static.hfc.comcastbusiness.net; enve........
------------------------------
2020-04-06 13:56:01
attackspambots
spam
2020-01-24 15:04:17
attackspam
Dec 18 08:02:07  exim[30813]: [1\47] 1ihTLQ-00080z-68 H=50-197-210-138-static.hfc.comcastbusiness.net [50.197.210.138] F= rejected after DATA: This message scored 16.0 spam points.
2019-12-18 17:54:19
attackbotsspam
email spam
2019-12-17 19:38:38
attack
Autoban   50.197.210.138 AUTH/CONNECT
2019-12-13 04:01:33
attack
Automatic report - Banned IP Access
2019-09-03 12:59:28
attackspambots
proto=tcp  .  spt=41292  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (249)
2019-07-09 20:47:11
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.197.210.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62899
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.197.210.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 09 20:47:02 CST 2019
;; MSG SIZE  rcvd: 118
Host info
138.210.197.50.in-addr.arpa domain name pointer 50-197-210-138-static.hfc.comcastbusiness.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
138.210.197.50.in-addr.arpa	name = 50-197-210-138-static.hfc.comcastbusiness.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
209.97.134.82 attackbots
Apr 26 22:40:01 pornomens sshd\[25265\]: Invalid user anything from 209.97.134.82 port 39084
Apr 26 22:40:01 pornomens sshd\[25265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.134.82
Apr 26 22:40:03 pornomens sshd\[25265\]: Failed password for invalid user anything from 209.97.134.82 port 39084 ssh2
...
2020-04-27 05:24:14
51.254.227.121 attackspam
Scanning for exploits - /new1/license.txt
2020-04-27 05:33:22
218.78.87.25 attackbotsspam
Apr 26 23:04:42 OPSO sshd\[16264\]: Invalid user ss from 218.78.87.25 port 34430
Apr 26 23:04:42 OPSO sshd\[16264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.87.25
Apr 26 23:04:44 OPSO sshd\[16264\]: Failed password for invalid user ss from 218.78.87.25 port 34430 ssh2
Apr 26 23:07:04 OPSO sshd\[17251\]: Invalid user fan from 218.78.87.25 port 49674
Apr 26 23:07:04 OPSO sshd\[17251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.87.25
2020-04-27 05:32:47
64.111.121.238 attack
xmlrpc attack
2020-04-27 05:09:06
136.244.110.59 attackspambots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-04-27 05:34:38
222.186.30.218 attackspambots
Apr 26 23:01:30 mail sshd[11548]: Failed password for root from 222.186.30.218 port 56586 ssh2
Apr 26 23:01:33 mail sshd[11548]: Failed password for root from 222.186.30.218 port 56586 ssh2
Apr 26 23:01:35 mail sshd[11548]: Failed password for root from 222.186.30.218 port 56586 ssh2
2020-04-27 05:04:10
125.91.111.247 attackbots
Apr 26 22:34:13 mail sshd[6364]: Failed password for root from 125.91.111.247 port 58539 ssh2
Apr 26 22:40:03 mail sshd[7543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.111.247
Apr 26 22:40:05 mail sshd[7543]: Failed password for invalid user johannes from 125.91.111.247 port 47382 ssh2
2020-04-27 05:24:32
62.33.168.46 attack
Apr 26 22:44:50 h2829583 sshd[26976]: Failed password for root from 62.33.168.46 port 43006 ssh2
2020-04-27 05:27:17
150.109.194.59 attackbotsspam
Port probing on unauthorized port 6060
2020-04-27 05:13:31
222.186.175.154 attack
Apr 26 22:54:08 pve1 sshd[21262]: Failed password for root from 222.186.175.154 port 24960 ssh2
Apr 26 22:54:12 pve1 sshd[21262]: Failed password for root from 222.186.175.154 port 24960 ssh2
...
2020-04-27 05:03:43
201.77.124.248 attackspambots
Apr 26 22:38:30 v22018086721571380 sshd[31170]: Failed password for invalid user hendry from 201.77.124.248 port 9028 ssh2
2020-04-27 05:09:35
123.207.142.208 attackspambots
Apr 26 22:28:34 xeon sshd[42325]: Failed password for root from 123.207.142.208 port 33634 ssh2
2020-04-27 05:27:47
49.233.185.63 attackbots
2020-04-26T21:20:50.812438shield sshd\[16688\]: Invalid user pdb from 49.233.185.63 port 46910
2020-04-26T21:20:50.817072shield sshd\[16688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.185.63
2020-04-26T21:20:52.922362shield sshd\[16688\]: Failed password for invalid user pdb from 49.233.185.63 port 46910 ssh2
2020-04-26T21:25:52.252070shield sshd\[17718\]: Invalid user mike from 49.233.185.63 port 49788
2020-04-26T21:25:52.256002shield sshd\[17718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.185.63
2020-04-27 05:36:40
218.78.86.155 attack
Apr 26 22:45:19 eventyay sshd[6257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.86.155
Apr 26 22:45:21 eventyay sshd[6257]: Failed password for invalid user informix from 218.78.86.155 port 51240 ssh2
Apr 26 22:48:41 eventyay sshd[6317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.86.155
...
2020-04-27 05:04:30
77.79.20.143 attackbotsspam
Apr 27 02:02:36 gw1 sshd[14851]: Failed password for root from 77.79.20.143 port 34930 ssh2
...
2020-04-27 05:24:57

Recently Reported IPs

36.76.23.127 1.48.232.27 200.111.237.75 125.40.217.32
91.192.43.124 27.153.0.173 182.50.132.84 222.139.201.174
113.203.251.221 113.138.222.60 14.186.46.198 212.47.244.35
64.71.146.91 116.48.6.128 41.223.28.20 218.73.128.20
132.148.250.227 77.247.110.191 188.162.43.12 58.243.20.76