130.94.78.33📋 Copy

IP Intelligence Briefing: 130.94.78.33

*Generated from IPDebrief data*

Overview

• Risk Profile: Moderate Risk (50/100). No direct threat indicators (no malware, phishing, or malicious campaigns).
• Ownership: Registered to LIGHT NODE LIMITED (ASN 154177) under ARIN. Abuse contact available via RDAP.
• Geolocation: Located in City of London, UK (51.52°N, 0.09°E). High geolocation consensus.
• Network Role: Firewalled host with no open services or TLS certificates.

Threat Indicators

• No malicious activity detected in the last 30 days.
• DNSSEC Valid: Resolves with valid DNSSEC signatures.
• DNSBL Listings: Listed in 2 out of 8 DNSBLs (minimal risk).

Network Behavior

• Subnet: Isolated /32 host with no neighboring IPs detected.
• BGP: Routable via AS154177 (LIGHTNODE). No route instability or MOAS flags.
• Services: No open ports or HTTP/TLS services identified.

Historical Trends

• Stable risk profile over the past 30 days.
• No persistent malicious activity or ownership changes.
• Recent DNS observations show minimal risk (operator score: 0.13).

Recommendations

1. Monitor DNS Activity: Track DNSBL listings and verify if the IP is a false positive.

2. Network Segmentation: Ensure the isolated /32 subnet is properly segmented to prevent lateral movement.

3. Verify Ownership: Confirm LIGHT NODE LIMITED’s legitimacy and check for any historical abuse reports.

4. Baseline Observations: Use this IP as a baseline for future comparisons if suspicious activity emerges.

Conclusion

This IP poses no immediate threat but requires ongoing monitoring due to DNS-related risks. No action is needed unless further malicious behavior is observed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.