JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.78.27.84

66.78.27.84 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 49%: ?

49%

ISP	CODE200
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21769
Hostname(s)	84-27-78-66.rdns.colocationamerica.com
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.78.27.84

Whois 66.78.27.84

IP Abuse Reports for 66.78.27.84:

This IP address has been reported a total of 15 times from 7 distinct sources. 66.78.27.84 was first reported on July 26th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-28 04:46:21 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:46:15.141536 2026] [security2:error] [pid 28160:tid 28160] [client 66.78.27.84:35672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backyardbrickoven.com"] [uri "/sftp-config.json"] [unique_id "amg0F7Pkh7xtYA8k-Vg2pAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 04:18:05 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:17:59.505877 2026] [security2:error] [pid 2471460:tid 2471460] [client 66.78.27.84:64420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backsport.com"] [uri "/sftp-config.json"] [unique_id "amgtd_-8XYGeYCWag4OzJQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 02:43:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 22:43:30.119451 2026] [security2:error] [pid 3943941:tid 3944048] [client 66.78.27.84:56790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacacup.com"] [uri "/sftp-config.json"] [unique_id "amgXUk9030aBnDb2aqTHVgAAAoE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 21:55:18 (1 day ago)	Fail2Ban triggered	Web App Attack
🇳🇿 Tripwire	2026-07-27 13:35:20 (1 day ago)	Scanning for exploits - /.vscode/sftp.json	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:53:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:53:48.333957 2026] [security2:error] [pid 3437322:tid 3437322] [client 66.78.27.84:47158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "axiomcommercial.com"] [uri "/sftp-config.json"] [unique_id "amdU3JZnrD7o8t0gA4uPVgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-07-27 11:02:52 (1 day ago)	(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 66.78.27.84 (US/United States/84-27-78-66 ... show more (c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 66.78.27.84 (US/United States/84-27-78-66.rdns.colocationamerica.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 66.78.27.84 - - [27/Jul/2026:14:02:50 +0300] "GET /sftp-config.json HTTP/1.1" 403 408 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-27 09:40:06 (1 day ago)	(mod_security) mod_security (id:210580) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210580) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:39:58.098922 2026] [security2:error] [pid 3457253:tid 3457253] [client 66.78.27.84:47352] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|awani-partners.com\|F\|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/automateyourpractice.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "awani-partners.com"] [uri "/sftp-config.json"] [unique_id "amcnblDlmV-ocA-32JX5bAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-27 08:54:11 (1 day ago)	[MonJul2710:54:07.6168782026][security2:error][pid3979130:tid3979476][client66.78.27.84:0]ModSecurit ... show more [MonJul2710:54:07.6168782026][security2:error][pid3979130:tid3979476][client66.78.27.84:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/sftp-config.json\"][unique_id\"amccr5fCQ-16GVE9ldV4-AAAAJU\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 06:51:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:51:37.359136 2026] [security2:error] [pid 7594:tid 7594] [client 66.78.27.84:13158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avmcyber.com"] [uri "/sftp-config.json"] [unique_id "amb_-VSieCOmWtardHKwegAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:53:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:52:59.312945 2026] [security2:error] [pid 3950749:tid 3950749] [client 66.78.27.84:63740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aviil.net"] [uri "/sftp-config.json"] [unique_id "ambyO-mq6wjg6vx1w4eM9AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 01:33:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 21:33:45.646577 2026] [security2:error] [pid 4186:tid 4186] [client 66.78.27.84:49734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ava-world.com"] [uri "/sftp-config.json"] [unique_id "ama1eRfU-d5CzGvF0UCApgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 00:49:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica ... show more (mod_security) mod_security (id:210492) triggered by 66.78.27.84 (84-27-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 20:49:08.207132 2026] [security2:error] [pid 761641:tid 761641] [client 66.78.27.84:3092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autumn-kennedy.com"] [uri "/sftp-config.json"] [unique_id "amarBPYI1IsKe-Azo_eKNgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-27 00:43:39 (2 days ago)	[redacted] 66.78.27.84 - - [27/Jul/2026:01:43:37 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6843 ... show more [redacted] 66.78.27.84 - - [27/Jul/2026:01:43:37 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6843 0/50259 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 66.78.27.84 - - [27/Jul/2026:01:43:37 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6753 0/72936 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-26 18:27:34 (2 days ago)	Try to access /.vscode/sftp.json	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.112

🇨🇱 201.189.24.24

🇧🇪 146.148.18.228

🇺🇸 107.167.34.125

🇩🇪 69.5.169.112

🇺🇸 2602:80d:1007::3c

🇬🇧 217.154.51.5

🇨🇭 209.99.190.126

🇦🇲 176.32.193.16

🇨🇳 152.136.188.221

🇮🇳 150.129.62.27

🇨🇳 144.123.76.241

🇺🇸 54.146.156.132

🇺🇸 52.8.54.158

🇺🇸 20.83.48.204

🇻🇳 203.162.135.6

🇳🇱 195.178.110.30

🇬🇧 195.96.139.136

🇸🇪 158.174.210.161

🇺🇸 157.230.235.148