JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.77.25.60

196.77.25.60 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Marrakesh, Marrakesh-Safi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.77.25.60

Whois 196.77.25.60

IP Abuse Reports for 196.77.25.60:

This IP address has been reported a total of 19 times from 8 distinct sources. 196.77.25.60 was first reported on March 27th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkrufczyk	2026-03-28 11:33:00 (2 months ago)	webscan	Bad Web Bot
🇫🇷 Baking333	2026-03-28 03:07:19 (2 months ago)	[redacted] 196.77.25.60 - - [28/Mar/2026:04:07:17 +0100] "GET /[redacted] HTTP/2.0" 301 291 "http:// ... show more [redacted] 196.77.25.60 - - [28/Mar/2026:04:07:17 +0100] "GET /[redacted] HTTP/2.0" 301 291 "http://[redacted]/[redacted]" "Mozilla/5.0 (Linux; Android 13; Pixel 8) AppleWebKit/537.36 Chrome/125.0.0.0 Mobile Safari/537.36" [redacted] 196.77.25.60 - - [28/Mar/2026:04:07:17 +0100] "GET /[redacted] HTTP/2.0" 301 292 "https://[redacted]/[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 02:40:07 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 22:39:59.192987 2026] [security2:error] [pid 29475:tid 29475] [client 196.77.25.60:28557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ainalea.com"] [uri "/.env"] [unique_id "acc_fzhTaRNsXK5h9BPBNQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 02:18:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 22:18:47.598350 2026] [security2:error] [pid 1290:tid 1290] [client 196.77.25.60:39092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aim-controls.com"] [uri "/.env"] [unique_id "acc6hz2Po0y8OPOQ_2WGcQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 01:08:47 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 21:08:43.123806 2026] [security2:error] [pid 1876:tid 1876] [client 196.77.25.60:46599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aico-sal.com"] [uri "/.env"] [unique_id "accqG-nerUVpgGDIyiXN2gAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 00:43:44 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 20:43:37.516233 2026] [security2:error] [pid 2769:tid 2769] [client 196.77.25.60:16925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiagenttypes.com"] [uri "/.env"] [unique_id "acckOaL1E1e6O351ieoxrAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-03-28 00:12:57 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 mnsf	2026-03-28 00:05:20 (2 months ago)	Too many Status 40X (12) Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 00:01:52 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 20:01:42.995645 2026] [security2:error] [pid 17783:tid 17783] [client 196.77.25.60:24953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahsigns.com"] [uri "/.env"] [unique_id "accaZux11SCWcT3o04xplQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 23:42:03 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 19:41:56.708655 2026] [security2:error] [pid 30871:tid 30899] [client 196.77.25.60:64481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahmedalbanna.com"] [uri "/.env"] [unique_id "accVxGo7n_3mYzZzICvcEQAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 23:20:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 19:20:42.471719 2026] [security2:error] [pid 28230:tid 28230] [client 196.77.25.60:20024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahelfrick.com"] [uri "/.env"] [unique_id "accQyrzDqLB1eUngBGgcyQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 22:53:27 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 18:53:18.441666 2026] [security2:error] [pid 23948:tid 23948] [client 196.77.25.60:56489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aguasolar.com"] [uri "/.env"] [unique_id "accKXlP_o8mHl4OruHsyVQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-27 22:30:09 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 22:27:56 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 196.77.25.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 18:27:51.379818 2026] [security2:error] [pid 2515:tid 2515] [client 196.77.25.60:4984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrizel.com"] [uri "/.env"] [unique_id "accEZ4fSQ-FxplDlBNxczwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-03-27 21:43:26 (2 months ago)	126 requests with url.path *phpinfo.php	Brute-Force Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 193.151.135.3

🇦🇷 179.40.112.10

🇬🇧 101.36.97.74

🇫🇷 91.231.89.15

🇲🇦 81.192.46.32

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇬🇧 195.140.214.28

🇺🇸 162.216.149.171

🇮🇳 125.16.27.190

🇸🇪 83.226.11.84

🇺🇸 66.132.186.217

🇩🇪 54.37.74.179

🇺🇸 52.167.144.211

🇳🇱 45.148.10.183

🇺🇸 24.187.213.29

🇺🇸 20.168.7.2

🇯🇵 8.216.10.200

🇮🇳 4.247.141.61

🇷🇴 2.57.121.112