JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.200.39.210

212.200.39.210 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 0%: ?

ISP	TELEKOM SRBIJA
Usage Type	Fixed Line ISP
ASN	AS8400
Domain Name	mts.rs
Country	🇷🇸 Serbia
City	Stara Pazova, Vojvodina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.200.39.210

Whois 212.200.39.210

IP Abuse Reports for 212.200.39.210:

This IP address has been reported a total of 88 times from 52 distinct sources. 212.200.39.210 was first reported on June 15th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-04-10 05:17:15 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 COMPLEX	2026-01-26 01:07:18 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from RS. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from RS. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-16 01:06:11 (6 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 21. DDoS detected	DDoS Attack FTP Brute-Force Brute-Force
🇸🇬 Fn4ticHz	2025-12-11 23:10:05 (7 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇮🇳 Altis Shield	2025-11-30 23:12:48 (7 months ago)	Possible port scan detected from 212.200.39.210 (masscan/nmap signature)	Email Spam Port Scan
🇧🇪 cmbplf	2025-11-26 11:40:45 (7 months ago)	595 limiting connections by zone (3h15m59s)	DDoS Attack
🇺🇸 SuperEvilLuke	2025-11-04 21:43:59 (8 months ago)	Malicious activity detected from 8400 TELEKOM-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-1 ... show more Malicious activity detected from 8400 TELEKOM-AS towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:43:59Z (1 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-11-03 08:16:36 (8 months ago)	Triggered Cloudflare WAF (l7ddos) from RS. Action taken: BLOCK ASN: 8400 (TELEKOM-AS) Protocol: HTTP ... show more Triggered Cloudflare WAF (l7ddos) from RS. Action taken: BLOCK ASN: 8400 (TELEKOM-AS) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-11-03T08:16:36Z Ray ID: 998a6e330835e295 UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-10-07 23:55:45 (9 months ago)	Malicious activity detected from 8400 TELEKOM-AS towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025 ... show more Malicious activity detected from 8400 TELEKOM-AS towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:45Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 Audir8 \| RRHosting	2025-10-05 20:53:52 (9 months ago)	2025-10-05T20:47:54.549151rrhostingusa wings[2058776]: 2025/10/05 20:47:45 http: TLS handshake error ... show more 2025-10-05T20:47:54.549151rrhostingusa wings[2058776]: 2025/10/05 20:47:45 http: TLS handshake error from 212.200.39.210:43211: EOF 2025-10-05T20:50:05.852317rrhostingusa wings[2058776]: 2025/10/05 20:49:54 http: TLS handshake error from 212.200.39.210:44282: write tcp 10.0.0.206:8443->212.200.39.210:44282: write: broken pipe 2025-10-05T20:51:27.863252rrhostingusa wings[2058776]: 2025/10/05 20:51:22 http: TLS handshake error from 212.200.39.210:45447: write tcp 10.0.0.206:8443->212.200.39.210:45447: write: broken pipe ... show less	Web App Attack
🇺🇸 skycodee	2025-10-05 12:49:26 (9 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇬🇧 Silly Development	2025-09-29 20:52:21 (9 months ago)	Malicious activity detected from 8400 TELEKOM-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-09- ... show more Malicious activity detected from 8400 TELEKOM-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:21Z (2 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 1gz	2025-08-28 00:29:56 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from RS. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from RS. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Browser95/26.0 (Device52; AmigaOS) Engine72/75.0 (KHTML, like Gecko) Feature41/19.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 1gz	2025-08-27 22:14:48 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from RS. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from RS. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; U; Linux i686; en; rv:1.8.1.3) Gecko/20070403 Epiphany/2.16 Firefox/2.0.0.3 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-08-16 23:10:41 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 109.105.209.2

🇬🇧 51.75.161.33

🇿🇼 2605:59c1:3610:6610:1cc6:d105:2218:b895

🇳🇱 213.152.176.135

🇧🇩 61.247.179.182

🇬🇧 35.203.210.60

🇲🇿 197.242.170.10

🇲🇱 197.155.176.71

🇩🇪 194.88.98.92

🇨🇳 171.217.92.33

🇹🇷 94.154.43.230

🇳🇱 91.92.47.120

🇧🇬 79.124.62.178

🇵🇱 74.248.33.172

🇩🇪 69.5.169.121

🇩🇪 69.5.169.45

🇩🇪 69.5.169.43

🇳🇱 45.148.10.147

🇺🇸 45.33.90.191

🇲🇾 14.192.212.19