199.241.240.154

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
14 reports
12 reporters · latest 1 week ago
ISP
Mercury Broadband
Usage Type
Fixed Line ISP
ASN
AS11597
Hostname(s)
host199-241-240-154.rev.mercurywireless.com
Domain Name
mercuryfiber.com
Country
🇺🇸 United States of America
City
Fort Wayne, Indiana
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇮🇩 Indonesia 2
Most common categories Brute-Force 8 Hacking 5 Email Spam 4 Exploited Host 3 Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 netclix.gr
(smtpauth) Failed SMTP AUTH login from 199.241.240.154 (US/United States/host199-241-240-154.rev.mercurywireless.com)
Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-27 UTC.
Brute-Force Exploited Host
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 1 unsolicited message (spam/phishing (fake document notifications)). Observed 2026-10-26T16:59:13-04:00 to 2026-10-26T16:59:13-04:00.
Email Spam Hacking Brute-Force
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 1 unsolicited message (spam/phishing (fake document notifications)). Observed 2026-10-26T16:59:13-04:00 to 2026-10-26T16:59:13-04:00.
Email Spam Hacking Brute-Force
🇦🇺 Asimar
199.241.240.154 (US/United States/Indiana/Columbia City/host199-241-240-154.rev.mercurywireless.com/[redacted]
Brute-Force
🇫🇷 adlp.org
Brute-Force
🇳🇱 Mangelot Hosting
Web App Attack
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-020.mach3builders.nl
Port Scan Hacking
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 199.241.240.154: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇮🇩 hermawan
Email Spam Hacking
🇮🇩 hermawan
Email Spam Hacking
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force
🇮🇹 Progetto1
Mail - Multiple failed login attempts
Brute-Force Exploited Host
🇷🇺 DZBOT
DZBOT: Brute-force users IMAP/POP3
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 195.206.182.209
🇲🇽 189.147.225.19
🇳🇱 141.11.0.18
🇳🇱 109.160.32.142
🇮🇳 106.219.64.18
🇺🇸 66.249.65.15
🇺🇸 52.188.229.71
🇿🇦 41.76.109.172
🇺🇸 206.81.14.245
🇬🇧 185.247.137.28
🇺🇸 138.68.16.163
🇨🇳 120.41.228.226
🇳🇱 109.160.32.145
🇫🇮 104.28.152.29
🇻🇳 103.48.84.200
🇦🇺 101.187.203.166
🇷🇺 88.87.85.199
🇺🇸 67.6.149.59
🇫🇷 51.254.130.161
🇨🇳 36.138.44.211
feedback