14.103.115.210
IP Intelligence Briefing for 14.103.115.210
*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*
---
**Key Observations**
1. Risk Profile:
- Moderate Risk (50/100 score) with no direct malicious indicators (no known attackers, spam, or campaigns).
- Ownership: Assigned to IRT-VOLCANO-ENGINE-CN (APNIC), a Chinese organization.
- Geolocation: Located in China (Shanghai), with DNSSEC validation and plausible geolocation.
2. Network Context:
- Part of the 14.103.112.0/21 BGP prefix, associated with the VOLCANO-ENGINE network.
- Subnet 14.103.115.0/24 contains 27 IPs, with 17 medium-risk and 10 low-risk siblings. Notably, IPs like 14.103.115.124 (65/100 risk) and 14.103.115.213 (65/100 risk) show elevated scores.
3. Threat Indicators:
- No active threats, malware, or phishing campaigns linked to this IP.
- 2 DNSBL listings (e.g., Spamhaus, OpenBL) suggest potential abuse, though no confirmed malicious activity.
4. Behavioral & Technical Data:
- No open ports, TLS certificates, or HTTP services detected.
- DNS records and PTR lookups are unresponsive or incomplete.
- Stability metrics indicate a non-residential network (likely enterprise or cloud infrastructure).
---
**Recommended Actions**
- Monitor Subnet Activity: Track high-risk neighbors (e.g., 14.103.115.124, 14.103.115.213) for anomalous traffic patterns.
- Investigate DNSBL Listings: Verify if the subnet is part of a larger abuse pattern or misconfigured infrastructure.
- Geolocation Context: Consider the Chinese origin when assessing potential regulatory or geopolitical risks.
- Network Segmentation: Ensure isolation of this subnet from critical assets, given mixed risk levels in the neighborhood.
---
Conclusion:
This IP appears benign but is part of a subnet with mixed risk. While no direct threats are detected, the presence of DNSBL listings and high-risk neighbors warrants closer monitoring. SOC teams should prioritize contextual analysis of the broader network and verify potential misconfigurations or abuse patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VOLCANO-ENGINE-CN |
| ASN | AS137718 |
| Network Name | — |
| CIDR Block | — |
| RIR | APNIC |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 16% | 8 | 10 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-15 20:46:43 UTC |
| Last Seen | 2026-06-26 18:10:37 UTC |
| Profile Built | 2026-06-07 16:29:20 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 23 |
Full dossier details are available via our API.