[nsp-sec] ftp credentials 20090629

[Hank Nussbacher]

On Mon, 29 Jun 2009, Stephen Gill wrote:

> Hi Hank,
>
>> 5486    | 192.117.163.3    | EU | rus102 | SMILE-ASN Euronet Digital
>> Communications, (1992) LTD, Israel
>
> As per the docs, CC is based on registry data, not whois or geolocation.

The RIPE registry file shows:
ripencc|EU|ipv4|192.114.0.0|327680|19930901|assigned

which was an ERX assignment from the MIL.NIC days that was transferred 
from ARIN to RIPE:

inetnum:      192.114.0.0 - 192.118.255.255
netname:      NETBLK-ISRAELC-BLOCK
descr:        Internet Society of Israel
remarks:      ---------------------------------------------------------
remarks:      This IP block was assigned originally to IUCC by nic.ddn.mil
remarks:      on July 26, 1991 and reassigned to ISOC-IL in Jan 1998.
remarks:      These addresses were allocated to ISPs who assign
remarks:      them to users' networks as well as to multihomed companies.
remarks:      ISOC-IL does not operate any networks from this block and
remarks:      is not responsible for spamming and hacking issued from
remarks:      these IP addresses.  For further details see:
remarks:      http://www.isoc.org.il/ipolicy.html
remarks:      ---------------------------------------------------------
country:      IL
org:          ORG-II4-RIPE
admin-c:      HN7
tech-c:       HN7
status:       ALLOCATED UNSPECIFIED
notify:       hank at isoc.org.il
mnt-by:       ISOC-MNT
mnt-lower:    ISOC-MNT
changed:      hank at isoc.org.il 20010218
changed:      hostmaster at ripe.net 20010816
changed:      hank at isoc.org.il 20010816
changed:      er-transfer at ripe.net 20050302
source:       RIPE

So I guess I have to argue with RIPE about its listing in the registry 
file. :-(

-Hank

>
> -- steve
>
> -- 
> Stephen Gill, Chief Scientist, Team Cymru
> http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com
>
>