130.94.21.201 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 130.94.21.201 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟡 Low Risk — 40/100

Geographic Location

Host and Network Information

Tags

  • botnet
  • bruteforce
  • cowrie
  • database
  • digital ocean
  • dionaea
  • fatt
  • honeytrap
  • mailoney
  • p0f
  • portscan
  • rce
  • redis
  • replication
  • scanner
  • scanners
  • sensor-tagged
  • sentrypeer
  • suricata
  • tanner
  • tpot
  • vultr

Attack Log References

Whois Information

NetRange: 130.94.0.0 - 130.94.255.255 CIDR: 130.94.0.0/16 NetName: NTTA-130-94 NetHandle: NET-130-94-0-0-1 Parent: NET130 (NET-130-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: NTT America, Inc. (NTTAM-1) RegDate: 1988-07-11 Updated: 2026-02-10 Comment: Geofeed https://geo.ip.gin.ntt.net/geofeeds/geofeeds.csv Comment: Comment: Reassignment information for this block is Ref: https://rdap.arin.net/registry/ip/130.94.0.0 OrgName: NTT America, Inc. OrgId: NTTAM-1 Address: 15809 Bear Creek Pkwy Address: Suite 320 City: Redmond StateProv: WA PostalCode: 98052 Country: US RegDate: 2005-12-08 Updated: 2024-03-04 Ref: https://rdap.arin.net/registry/entity/NTTAM-1 OrgRoutingHandle: PEERI-ARIN OrgRoutingName: Peering OrgRoutingPhone: +1-877-688-6625 OrgRoutingEmail: peering@ntt.net OrgRoutingRef: https://rdap.arin.net/registry/entity/PEERI-ARIN OrgTechHandle: VIPAR-ARIN OrgTechName: VIPAR OrgTechPhone: +1-877-688-6625 OrgTechEmail: ipr@gin.ntt.net OrgTechRef: https://rdap.arin.net/registry/entity/VIPAR-ARIN OrgTechHandle: CANDE70-ARIN OrgTechName: Candela, Massimo OrgTechPhone: +1-214-915-1366 OrgTechEmail: massimo@ntt.net OrgTechRef: https://rdap.arin.net/registry/entity/CANDE70-ARIN OrgNOCHandle: NASC-ARIN OrgNOCName: NTT America Support Contact OrgNOCPhone: +1-877-688-6625 OrgNOCEmail: ce-support@gin.ntt.net OrgNOCRef: https://rdap.arin.net/registry/entity/NASC-ARIN OrgAbuseHandle: NAAC-ARIN OrgAbuseName: NTT America Abuse Contact OrgAbusePhone: +1-877-688-6625 OrgAbuseEmail: abuse@ntt.net OrgAbuseRef: https://rdap.arin.net/registry/entity/NAAC-ARIN RTechHandle: VIA4-ORG-ARIN RTechName: VIPAR RTechPhone: +1-877-688-6625 RTechEmail: ipr@gin.ntt.net RTechRef: https://rdap.arin.net/registry/entity/VIA4-ORG-ARIN NetRange: 130.94.0.0 - 130.94.127.255 CIDR: 130.94.0.0/17 NetName: LIGHTNODE NetHandle: NET-130-94-0-0-2 Parent: NTTA-130-94 (NET-130-94-0-0-1) NetType: Reassigned OriginAS: Organization: LIGHT NODE LIMITED (LNL-107) RegDate: 2025-09-29 Updated: 2025-10-28 Comment: https://www.lightnode.com/geofeed.csv Ref: https://rdap.arin.net/registry/ip/130.94.0.0 OrgName: LIGHT NODE LIMITED OrgId: LNL-107 Address: UNIT 02,8/F LT TOWER 31 CHONG YIP ST KWUN TONG HONGKONG Address: HONGKONG , Address: China City: HONG KONG StateProv: PostalCode: Country: CN RegDate: 2025-09-15 Updated: 2025-09-26 Ref: https://rdap.arin.net/registry/entity/LNL-107 OrgTechHandle: SANDY30-ARIN OrgTechName: Sandy Zhong OrgTechPhone: +8615280056043 OrgTechEmail: sandy@lightnode.com OrgTechRef: https://rdap.arin.net/registry/entity/SANDY30-ARIN OrgAbuseHandle: SANDY30-ARIN OrgAbuseName: Sandy Zhong OrgAbusePhone: +8615280056043 OrgAbuseEmail: sandy@lightnode.com OrgAbuseRef: https://rdap.arin.net/registry/entity/SANDY30-ARIN network:Class-Name:network network:Auth-Area:130.94.0.0/16 network:ID:USV4-130-94-0-0.127.0.0.1/32 network:Handle:USV4-130-94-0-0 network:Network-Name:USV4-130-94-0-0 network:IP-Network:130.94.0.0/17 network:In-Addr-Server;I:GIN1-HST.127.0.0.1/32 network:In-Addr-Server;I:GIN2-HST.127.0.0.1/32 network:In-Addr-Server;I:GIN3-HST.127.0.0.1/32 network:In-Addr-Server;I:GIN4-HST.127.0.0.1/32 network:In-Addr-Server;I:GIN5-HST.127.0.0.1/32 network:IP-Network-Block:130.94.0.0 - 130.94.127.255 network:Org-Name:Light Node Limited network:Street-Address:unit 02, 8/F, LT Tower, 31 Chong network:City:Hong Kong network:State: network:Postal-Code:999077 network:Country-Code:HK network:Tech-Contact;I:NTT-LIGHTNODE.127.0.0.1/32 network:Created:2025-09-10 13:56:21.014656+00 network:Updated:2025-09-10 13:56:21.014656+00 network:Class-Name:network network:Auth-Area:130.94.0.0/16 network:ID:NETBLK-VRIO-130-094.127.0.0.1/32 network:Handle:NETBLK-VRIO-130-094 network:Network-Name:VRIO-130-094 network:IP-Network:130.94.0.0/16 network:In-Addr-Server;I:AUTH21-GIN-HST.127.0.0.1/32 network:In-Addr-Server;I:AUTH22-GIN-HST.127.0.0.1/32 network:In-Addr-Server;I:AUTH23-GIN-HST.127.0.0.1/32 network:In-Addr-Server;I:AUTH24-GIN-HST.127.0.0.1/32 network:In-Addr-Server;I:AUTH25-GIN-HST.127.0.0.1/32 network:IP-Network-Block:130.94.0.0 - 130.94.255.255 network:Org-Name:NTT America, Inc. network:Street-Address:8300 E Maplewood Ave. Suite 400 network:City:Greenwood Village network:State:CO network:Postal-Code:80111 network:Country-Code:US network:Tech-Contact;I:VIA4-ORG-ARIN.127.0.0.1/32 network:Created:2001-03-05 12:09:44+00 network:Updated:2025-04-10 17:11:25.406854+00