[afnog] Geofeed
sm+afrinic at elandsys.com
sm+afrinic at elandsys.com
Tue Aug 26 09:45:21 UTC 2025
Dear Mr Chirwa,
There were 20 HTTP requests to a web server, e.g. "GET
/2019/wp-includes/wlwmanifest.xml HTTP/1.1" It looks like the client
was probing the web server for Microsoft's Windows Live Writer
support. The requests originated from 196.251.114.163. The AFRINIC
records for the IP address range are as follows:
inetnum: 196.251.114.0 - 196.251.114.255
netname: internet-secuirty-Nybula
descr: internet-security-Nybula
country: SC
admin-c: SOV12-AFRINIC
tech-c: NY12-AFRINIC
status: ASSIGNED PA
remarks: https://geofeed.african.lat/ipv4.csv
mnt-by: SOV-MNT
mnt-by: SIL3-MNT
source: AFRINIC # Filtered
parent: 196.251.64.0 - 196.251.127.255
role: External Abuse Team Nybula
address: 821 N ST STE 102 ANCHORAGE
phone: tel:+1-938-204-9112
abuse-mailbox: abuse at nybula.com
nic-hdl: NY12-AFRINIC
admin-c: QS12-AFRINIC
tech-c: QS12-AFRINIC
mnt-by: SIL3-MNT
source: AFRINIC # Filtered
The network is listed as being in Seychelles while the abuse team is
in Alaska. A localization webpage "located" the IP address in
Germany: https://geotraceroute.com/?node=1319&host=196.251.114.163
Is there any recommendation for the "remarks:" field for Geofeed to
be compliant with RFC 9092 or RFC 9632?
Regards,
S. Moonesamy
More information about the afnog
mailing list