Severe Risk
IP 195.24.237.237 presents a critical risk profile with a maximum threat level of 10/10, driven by 415 total abuse reports and a dominant pattern of web application attack activity originating from Iranian network infrastructure. Despite a moderate confidence score of 69 percent, this address warrants immediate defensive attention from any organization operating internet-facing web services.
Automated honeypot sensors detected the hostile activity consistently throughout November 2025, with all 20 of the most recent reports specifically categorizing the behavior as web application attacks. The network is registered to Amin Gostar Saheb Jam Trading PJSC in Iran, an ISP whose infrastructure may be hosting compromised systems or running intentional scanning operations. The discrepancy between the 415 total reports and the 0/10 activity frequency metric suggests sporadic but persistent engagement over time rather than high-volume automated flooding.
Web application attacks encompass exploitation attempts againstOWASP Top 10 vulnerabilities, including cross-site scripting, cross-site request forgery, local and remote file inclusion, SQL injection, and authentication bypass. An IP conducting such probes is actively mapping your public-facing applications for known weaknesses, potentially as a precursor to data theft, website defacement, or lateral movement. Even low-frequency probing indicates reconnaissance that attackers often automate across millions of targets simultaneously.
Network administrators should block this address at the firewall or edge gateway level, implement a web application firewall rule set covering OWASP Top 10 attack vectors, and audit all public-facing applications for the vulnerabilities most commonly exploited in automated scanning campaigns. Deploying tools such as fail2ban or equivalent rate-limiting mechanisms can further reduce the effectiveness of sustained reconnaissance efforts. Regular security assessments and prompt patching of web application frameworks will close the gaps this actor is clearly probing for.
