[afnog] Geofeed
    sm+afrinic at elandsys.com 
    sm+afrinic at elandsys.com
       
    Tue Aug 26 09:45:21 UTC 2025
    
    
  
Dear Mr Chirwa,
There were 20 HTTP requests to a web server, e.g. "GET 
/2019/wp-includes/wlwmanifest.xml HTTP/1.1"  It looks like the client 
was probing the web server for Microsoft's Windows Live Writer 
support.  The requests originated from 196.251.114.163.  The AFRINIC 
records for the IP address range are as follows:
   inetnum:        196.251.114.0 - 196.251.114.255
   netname:        internet-secuirty-Nybula
   descr:          internet-security-Nybula
   country:        SC
   admin-c:        SOV12-AFRINIC
   tech-c:         NY12-AFRINIC
   status:         ASSIGNED PA
   remarks:        https://geofeed.african.lat/ipv4.csv
   mnt-by:         SOV-MNT
   mnt-by:         SIL3-MNT
   source:         AFRINIC # Filtered
   parent:         196.251.64.0 - 196.251.127.255
   role:           External Abuse Team Nybula
   address:        821 N ST STE 102 ANCHORAGE
   phone:          tel:+1-938-204-9112
   abuse-mailbox:  abuse at nybula.com
   nic-hdl:        NY12-AFRINIC
   admin-c:        QS12-AFRINIC
   tech-c:         QS12-AFRINIC
   mnt-by:         SIL3-MNT
   source:         AFRINIC # Filtered
The network is listed as being in Seychelles while the abuse team is 
in Alaska.  A localization webpage "located" the IP address in 
Germany: https://geotraceroute.com/?node=1319&host=196.251.114.163
Is there any recommendation for the "remarks:" field for Geofeed to 
be compliant with RFC 9092 or RFC 9632?
Regards,
S. Moonesamy
    
    
More information about the afnog
mailing list