Forum Moderators: open

Found some bad actors from this ISP

cheapy.host LLC 196.251.81.0

         

Bewenched

4:58 pm on Oct 11, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Many many fraud attempts on our ecommerce site as well as scraping activity.

IP address 196.251.81.125
Host name 196.251.81.125
IP range 196.251.80.0-196.251.81.255 CIDR
ISP cheapy.host LLC

why am I not surprised with this name.

not2easy

5:25 pm on Oct 11, 2025 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Great, that's an AFRINIC IP and the CIDR is 196.251.80.0/23

lucy24

9:31 pm on Oct 11, 2025 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



why am I not surprised with this name.
Took the words right out of my mouth.

Looking it up, I find that 196.251.70.0/23 (which I’d previously flagged) is the same host--irritating, since this puts us in a different /20 and I haven't the energy to look up every last /24. But I would not be surprised to learn that all of 196.251.64.0/18 (64-127) is bad.

SumGuy

2:18 am on Oct 12, 2025 (gmt 0)

5+ Year Member Top Contributors Of The Month



AS401120 cheapy.host LLC

Spur says - 196.251.81.125 belongs to the Pure VPN anonymization network.

This would probably give you more geo-detail, but the file is not currently reachable:

https: // geofeed.african.lat/ipv4.csv