IP Intelligence Briefing: 14.103.114.196
Date: 2026-05-30
---
**1. Risk Profile**
- Overall Risk: Moderate (Risk Score: 65)
- Threat Indicators: No direct malicious activity detected (no indicators, blacklists, or campaigns).
- Network Role: Firewalled / No Services (no open ports, TLS, or HTTP services).
- Ownership:
- ASN: 137718 (IRT-VOLCANO-ENGINE-CN)
- Region: China (CN)
- Network: 14.103.0.0/16
---
**2. Observation History**
- Recent Activity (2026-05-30):
- Subnet abuse density: 0.7083 (classified as *high_abuse*).
- 17 active siblings in the 14.103.114.196/24 subnet, with 17 threat siblings.
- No persistent malicious behavior or ownership changes.
---
**3. Network Relationships**
- Linked Entities:
- Subnet: VOLCANO-ENGINE (ASN 137718).
- No DNS, hostnames, or certificates associated.
- Neighbor Analysis:
- Subnet 14.103.114.196/24 has 23 siblings, with 23 medium-risk IPs (no high-risk IPs listed).
- Neighbors include IPs like 14.103.114.2, 14.103.114.194, and 14.103.114.234 (risk scores: 40โ50).
---
**4. Threat Context**
- Subnet Risk: High abuse density (0.7083) with 17 active malicious IPs.
- Geolocation: China (CN), likely part of a cloud or infrastructure network.
- No Direct Threats: No malware, phishing, or spam indicators linked to the IP.
---
**5. Recommendations**
- Monitor Subnet: The 14.103.114.196/24 subnet has a high abuse density; consider blocking or monitoring traffic from this range.
- Check for Exposures: Verify if the IP is part of a cloud service or infrastructure (no services detected).
- Investigate Neighbors: Analyze neighboring IPs (e.g., 14.103.114.2, 14.103.114.194) for potential lateral movement or related activity.
- Verify Ownership: Confirm the legitimacy of IRT-VOLCANO-ENGINE-CN (ASN 137718) and assess if it aligns with known infrastructure.
---
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-VOLCANO-ENGINE-CN |
| ASN | AS4811 |
| Network Name | VOLCANO-ENGINE |
| CIDR Block | 14.103.0.0/16 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 19% | 1 | 2 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 18% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-14 23:34:42 UTC |
| Last Seen | 2026-06-26 18:10:37 UTC |
| Profile Built | 2026-06-18 23:27:04 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 17 |
Full dossier details are available via our API.