0xB10C calls the entity “LinkingLion” because the IP addresses associated with it pass through LionLink network’s colocation data center. However, ARIN and RIPE registry information reveal that this company is probably not the originator of the messages, according to 0xB10C.
According to the post, this behavior may indicate that the entity is trying to determine if a particular node can be reached at a particular IP address.
Anyone know about this?
I don't know for sure however, a look at the entity's behavior suggests that it might try to determine if a certain node is reachable at a certain IP address by linking to their Bitcoin address.