JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.105.99.149

200.105.99.149 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 30%: ?

30%

ISP	TELECABLE RESIDENCIAL
Usage Type	Fixed Line ISP
ASN	AS52263
Hostname(s)	rev149.99.telecablecr.com
Domain Name	telecablecr.com
Country	🇨🇷 Costa Rica
City	San Jose, San Jose

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.105.99.149

Whois 200.105.99.149

IP Abuse Reports for 200.105.99.149:

This IP address has been reported a total of 13 times from 10 distinct sources. 200.105.99.149 was first reported on July 5th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 13:28:57 (5 hours ago)	(mod_security) mod_security (id:210350) triggered by 200.105.99.149 (rev149.99.telecablecr.com): 1 i ... show more (mod_security) mod_security (id:210350) triggered by 200.105.99.149 (rev149.99.telecablecr.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:28:51.293494 2026] [security2:error] [pid 22892:tid 22892] [client 200.105.99.149:27146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|allisonokon.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "allisonokon.com"] [uri "/"] [unique_id "aq08k34dCFLDwXdhuzkFZgAAAAo"], referer: https://bulkdaandpachecker.store/dir/results-driven-link-building-6981 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-01 01:12:28 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-29 02:23:09 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇪🇸 el-brujo	2026-08-29 00:13:07 (2 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇩🇪 Oakley	2026-08-18 09:59:27 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇩🇪 Vegascosmetics	2026-08-15 21:43:49 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 01:24:23 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 200.105.99.149 (rev149.99.telecablecr.com): 1 i ... show more (mod_security) mod_security (id:217210) triggered by 200.105.99.149 (rev149.99.telecablecr.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 21:24:15.076016 2026] [security2:error] [pid 3525012:tid 3525012] [client 200.105.99.149:24609] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|eastbrooktech.com\|F\|4"] [data "GET http://eastbrooktech.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eastbrooktech.com"] [uri "/"] [unique_id "an5uP2lROVU6vBQhwVTGjwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-12 19:25:45 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-20 08:47:39 (1 month ago)	[Askari] \| Behavior: Targeting specific pages, Slow-read attack, Concurrent page load during attack, ... show more [Askari] \| Behavior: Targeting specific pages, Slow-read attack, Concurrent page load during attack, HTTP/1.1 over TLS, Outdated browser show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-20 08:47:39 (1 month ago)	180 IPs targeting /brand/satco-products-inc.html \| URL template shared by 16 IPs: /brand/satco-produ ... show more 180 IPs targeting /brand/satco-products-inc.html \| URL template shared by 16 IPs: /brand/satco-products-inc.html?bulb_shape=&bulb_shape_type=&bulb_type=*&mode=l \| Facet request during elevated threat (facet_ratio=0.96, unique_ips=895) show less	Bad Web Bot DDoS Attack
Anonymous	2026-07-18 22:30:36 (1 month ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/9317/form_key/k5OLxxSDPVsOIOOH/ \| UA: Mozilla/5.0 (Linux; Android 4.3) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/46.0.809.0 Safari/532.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-07-16 09:17:31 (2 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 pixelmemory.us	2026-07-05 07:31:16 (2 months ago)	2026-07-05T07:29:23 200.105.99.149 GET /Photos/Vacation/2021-11-19%20Tropics/raw/DSC04884.ARW.xmp Mo ... show more 2026-07-05T07:29:23 200.105.99.149 GET /Photos/Vacation/2021-11-19%20Tropics/raw/DSC04884.ARW.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36 ... show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.3.153.239

🇪🇨 186.68.83.104

🇮🇩 163.7.9.194

🇺🇸 162.216.150.240

🇮🇹 151.60.76.222

🇺🇸 147.185.132.205

🇨🇳 117.50.127.153

🇳🇱 45.148.10.183

🇨🇳 203.55.224.216

🇨🇳 182.43.164.191

🇧🇬 109.160.32.105

🇳🇱 91.92.243.20

🇳🇱 45.142.193.169

🇺🇸 35.188.150.151

🇱🇰 220.247.224.226

🇺🇸 216.73.163.29

🇧🇷 187.16.4.238

🇮🇳 161.248.37.160

🇺🇸 159.223.142.57

🇩🇪 150.241.70.245