JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.117.24.59

195.117.24.59 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 67%: ?

67%

ISP	ByteMe s.c.
Usage Type	Fixed Line ISP
ASN	AS5617
Domain Name	byteme.pl
Country	🇵🇱 Poland
City	Zawonia, Lower Silesia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.117.24.59

Whois 195.117.24.59

IP Abuse Reports for 195.117.24.59:

This IP address has been reported a total of 63 times from 42 distinct sources. 195.117.24.59 was first reported on November 21st 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-07-27 13:19:58 (4 hours ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇬🇧 D3monite	2026-07-27 07:05:01 (10 hours ago)	Attempted Brute Force (dovecot)	Brute-Force
🇮🇩 sockominfo	2026-07-26 17:00:53 (1 day ago)	Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇹 joe-abuse	2026-07-25 05:44:38 (2 days ago)	2026-07-25T07:44:38.088533+02:00 ucs1 dovecot: auth: pam([email protected],195.117.24.59,<F80U/G ... show more 2026-07-25T07:44:38.088533+02:00 ucs1 dovecot: auth: pam([email protected],195.117.24.59,<F80U/GhXu8nDdRg7>): unknown user (given password: Role2000) ... show less	Brute-Force
🇺🇸 vestibtech	2026-07-24 22:57:09 (2 days ago)	2026-07-24T16:57:08.424170-06:00 Host-KLAX-C dovecot[1218]: imap-login: Disconnected: Connection clo ... show more 2026-07-24T16:57:08.424170-06:00 Host-KLAX-C dovecot[1218]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=195.117.24.59, lip=185.198.26.44, TLS, session=<TnjeSWNXDOfDdRg7> ... show less	Brute-Force
Anonymous	2026-07-23 19:49:38 (3 days ago)	Authentication failure	Brute-Force
🇺🇸 TAY	2026-07-21 21:51:16 (5 days ago)	2026-07-22 05:51:12 auth-worker(14810): Info: sql(eddie,195.117.24.59,<bTN1BSZXaOfDdRg7>): unknown u ... show more 2026-07-22 05:51:12 auth-worker(14810): Info: sql(eddie,195.117.24.59,<bTN1BSZXaOfDdRg7>): unknown user 2026-07-22 05:51:15 imap-login: Info: Disconnected (auth failed, 1 attempts in 3 secs): user=<eddie>, method=PLAIN, rip=195.117.24.59, lip=162.220.160.187, TLS, session=<bTN1BSZXaOfDdRg7> ... show less	Brute-Force
🇮🇩 sockominfo	2026-07-12 15:00:12 (2 weeks ago)	Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-07-12 05:14:35 (2 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇨🇦 Julio Covolato	2026-07-03 15:05:03 (3 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇧🇷 ICS Labs	2026-07-02 15:40:27 (3 weeks ago)	ICS Labs identified 195.117.24.59 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇮🇩 sockominfo	2026-06-30 15:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-30 14:00:09 (3 weeks ago)	Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 5.2/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 195.117.24.59. Threat Score: 5.2/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇯🇵 kawanchu	2026-06-30 10:40:35 (3 weeks ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force
🇩🇪 rd1742	2026-06-30 08:19:49 (3 weeks ago)	Jun 30 08:19:48 quad dovecot: auth-worker(3172230): sql(veturware.com,195.117.24.59,<66cIPXRVtLjDdRg ... show more Jun 30 08:19:48 quad dovecot: auth-worker(3172230): sql(veturware.com,195.117.24.59,<66cIPXRVtLjDdRg7>): unknown user show less	Brute-Force Exploited Host

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 114.130.85.36

🇬🇧 2a06:4880:2000::42

🇺🇸 2600:3c00::2000:d5ff:fefb:7299

🇨🇿 213.192.13.54

🇳🇱 195.66.213.121

🇷🇺 185.240.102.11

🇺🇸 172.67.143.195

🇺🇸 104.152.52.131

🇮🇷 185.116.161.214

🇺🇦 185.40.51.198

🇨🇳 123.191.135.173

🇩🇪 104.207.51.24

🇸🇬 94.231.206.204

🇺🇸 66.132.224.16

🇳🇱 45.148.10.239

🇺🇸 45.79.181.104

🇳🇱 185.242.226.166

🇵🇱 176.53.159.197

🇫🇷 173.249.25.64

🇺🇸 135.135.84.149