beavere38
11-24-2006, 04:30 AM
One of my sites had over 1100 visits last night from this IP Address:
82.128.10.225
Two of my other sites also had a quick visit from this IP Address. (These three sites are all classifieds sites)
The reason I have looked into this is that this IP Address has already been banned by me for being used by African Spammers trying to email all my advertisers. They usually email people trying to pay with a forged cheque for more than the value of the item for sale and get you to send a "refund" of the balance by wire transfer before the forged cheque bounces.
A NetSol whois check shows:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
A look on Afrinic shows:
inetnum: 82.128.0.0 - 82.128.31.255
netname: INET-MLTL
descr: Multi-Links Telecommunications Limited
country: NG
admin-c: DG26
tech-c: RIA27
status: ASSIGNED PA
notify: deep @multi-links.com
mnt-by: MLTL-INT-MNT
changed: deep @multi-links.com 20040416
changed: hostmaster @afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
parent: 82.128.0.0 - 82.128.127.255
Could this be a "Nigerian Spam Bot" trying to harvest email addresses or even trying to email advertisers en masse? It would save them having to sit in internet cafes all day doing it manually.
Any comments ideas welcome .... Thanks.
82.128.10.225
Two of my other sites also had a quick visit from this IP Address. (These three sites are all classifieds sites)
The reason I have looked into this is that this IP Address has already been banned by me for being used by African Spammers trying to email all my advertisers. They usually email people trying to pay with a forged cheque for more than the value of the item for sale and get you to send a "refund" of the balance by wire transfer before the forged cheque bounces.
A NetSol whois check shows:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
A look on Afrinic shows:
inetnum: 82.128.0.0 - 82.128.31.255
netname: INET-MLTL
descr: Multi-Links Telecommunications Limited
country: NG
admin-c: DG26
tech-c: RIA27
status: ASSIGNED PA
notify: deep @multi-links.com
mnt-by: MLTL-INT-MNT
changed: deep @multi-links.com 20040416
changed: hostmaster @afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
parent: 82.128.0.0 - 82.128.127.255
Could this be a "Nigerian Spam Bot" trying to harvest email addresses or even trying to email advertisers en masse? It would save them having to sit in internet cafes all day doing it manually.
Any comments ideas welcome .... Thanks.