[afnog] Geofeed

sm+afrinic at elandsys.com sm+afrinic at elandsys.com
Tue Aug 26 09:45:21 UTC 2025


Dear Mr Chirwa,

There were 20 HTTP requests to a web server, e.g. "GET 
/2019/wp-includes/wlwmanifest.xml HTTP/1.1"  It looks like the client 
was probing the web server for Microsoft's Windows Live Writer 
support.  The requests originated from 196.251.114.163.  The AFRINIC 
records for the IP address range are as follows:

   inetnum:        196.251.114.0 - 196.251.114.255
   netname:        internet-secuirty-Nybula
   descr:          internet-security-Nybula
   country:        SC
   admin-c:        SOV12-AFRINIC
   tech-c:         NY12-AFRINIC
   status:         ASSIGNED PA
   remarks:        https://geofeed.african.lat/ipv4.csv
   mnt-by:         SOV-MNT
   mnt-by:         SIL3-MNT
   source:         AFRINIC # Filtered
   parent:         196.251.64.0 - 196.251.127.255

   role:           External Abuse Team Nybula
   address:        821 N ST STE 102 ANCHORAGE
   phone:          tel:+1-938-204-9112
   abuse-mailbox:  abuse at nybula.com
   nic-hdl:        NY12-AFRINIC
   admin-c:        QS12-AFRINIC
   tech-c:         QS12-AFRINIC
   mnt-by:         SIL3-MNT
   source:         AFRINIC # Filtered

The network is listed as being in Seychelles while the abuse team is 
in Alaska.  A localization webpage "located" the IP address in 
Germany: https://geotraceroute.com/?node=1319&host=196.251.114.163

Is there any recommendation for the "remarks:" field for Geofeed to 
be compliant with RFC 9092 or RFC 9632?

Regards,
S. Moonesamy




More information about the afnog mailing list