14.103.115.213📋 Copy

IP Intelligence Briefing: 14.103.115.213

Date: 2026-06-06

---

**1. Profile**

• Risk Score: Moderate (50/100)
• Ownership: ASN 4811 (IRT-VOLCANO-ENGINE-CN, APNIC)
• Geolocation: China (CN)
• Threat Indicators: No active threats, malware, or malicious activity detected.
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services).
• DNS: No PTR records, no email auth (SPF/DKIM), and no domain associations.

---

**2. Observation History**

• Recent Signals (last 30 days):

- DNSSEC Issues: Detected in 1 observation (low confidence).

- Subnet Abuse Density: 46.43% (mixed risk, 13/28 siblings flagged).

- Threat Persistence: No persistent malicious activity.

- Route Stability: Unstable BGP routes (route changes detected).

---

**3. Relationships**

• Network: Part of VOLCANO-ENGINE (ASN 4811).
• Linked Entities: No direct hostname, certificate, or organization associations.
• Subnet: 14.103.115.213/24, with 13 high-risk neighbors (avg. risk score 50).

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 46.43% (moderate risk).
• High-Risk Neighbors:

- 14.103.115.124 (risk score 65)

- 14.103.115.212 (risk score 50)

- 14.103.115.234 (risk score 50)

• Total Neighbors: 28 IPs (13 active, 13 flagged).

---

**5. Recommendations**

• Monitor Subnet: Track high-risk neighbors (e.g., 14.103.115.124) for lateral movement or C2 activity.
• Block High-Risk IPs: Consider blocking IPs with risk scores > 60 in the subnet.
• Verify Ownership: Confirm legitimacy of IRT-VOLCANO-ENGINE-CN (ASN 4811) to rule out spoofing.
• DNSSEC Compliance: Investigate DNSSEC validation issues in the subnet.

Note: No immediate action required for the IP itself, but contextualize within the subnet’s risk profile.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.