86.104.252.20

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
51 reports
33 reporters · latest 1 year ago
ISP
IPFO FIRSTHEBERG.COM
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197922
Hostname(s)
rack-11.firstheberg.net
Domain Name
firstheberg.com
Country
🇫🇷 France
City
Lille, Hauts-de-France
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

86.104.252.20 has been reported 51 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
51 from 33 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
DDOS attack.
DDoS Attack Phishing Hacking Bad Web Bot
🇧🇪 taivas.nl
Site scraper
Web App Attack
🇺🇸 Sylvyon
Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇨🇭 backslash
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸 drodrig
CrowdSec triggered: %!s(*string=0xc005e5bbb0) (0 events)
Brute-Force
🇬🇧 Greg Poulson
Our website was hit by this DDOS at a rate of 54 in 5 minutes.
DDoS Attack Web Spam Brute-Force
🇬🇧 blik2108
Brute-Force Web App Attack
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 20.252.104.86.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
Hacking
🇺🇸 etu brutus
86.104.252.20 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
Anonymous
Reported from Nginx log analysis 18. Log: 86.104.252.20 - - [22/Aug/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" "FR France Marly" "AS197922" "Techcrea Solutions SAS"
Port Scan Brute-Force SSH
🇪🇪 Unwasted
Blocked IP still knocking
Hacking
🇪🇪 Unwasted
Abusive content scan (abuse_score:>80)
Hacking Brute-Force Web App Attack
🇺🇸 CollideTech
Probing wordpress site
Web App Attack
Anonymous
Malicious activity detected
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 177.74.205.167
🇮🇳 168.144.17.209
🇸🇬 194.233.80.143
🇮🇳 152.58.78.222
🇨🇳 116.179.32.36
🇳🇱 89.21.67.133
🇺🇸 216.180.246.129
🇺🇸 216.25.90.71
🇳🇱 192.253.248.223
🇻🇳 163.223.210.138
🇺🇸 162.216.150.51
🇳🇱 136.144.209.118
🇺🇸 65.49.1.183
🇺🇸 64.62.197.100
🇺🇸 64.62.197.81
🇹🇼 49.216.125.41
feedback