[Dshield] ping-scanned by unregistered address: am I getting this right ?

Stephane Grobety security at admin.fulgan.com
Tue Oct 4 15:16:16 GMT 2005


Hello everyone,

One of my network just got ping-scanned by a machine sitting on IP
85.74.191.70. Now, when I do a whois lookup on this IP, I get back the
RIPE Amsterdam center network.

Am I right in guessing that this IP is actually unregistered to anyone
and therefore shouldn't be used ? If so, why is it routed ? It seems
to end up in Dusseldorf (guessing by the route, although there seem to
be a spelling mistake).

Thanks,
Stephane



More information about the list mailing list