IPHighVerifiedSignal 57/100
14.103.72.138
Location
ChinaBeijing, Beijing
ASN
AS137718
Beijing Bitone United Networks Technology Service Co., Ltd.
First Seen
Apr 6, 2026
Last Seen
Apr 23, 2026
Found in 4 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
57%
Signal Score
57 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionBeijing, Beijing
ASNAS137718
OrganizationBeijing Bitone United Networks Technology Service Co., Ltd.
Feed Intelligence Summary
4 reports57% confidence
4
Source reports
57%
Confidence score
Category tags
active scanactive scanningasiaaustraliabrute forcebrute force attackchinacredential accesscredential stuffingexploitation activityidentity & access exploitationindicatornetworkoceaniapassword attacksreconnaissanceresearchedscanscannersipsshssh attackt1110.001t1110.002t1110.003t1110.004t1595t1595.001t1595.002t1595.003
Activity Timeline
Apr 23Apr 23
Threat Activity Heatmap
· Peak: 2026-04-23LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
This indicator of compromise (IOC), an IPv4 address, represents a significant threat primarily associated with reconnaissance and credential-based attacks, evidenced by its high threat intelligence score of 56.76. If left unaddressed, this IP address could be leveraged to conduct various forms of hostile activity, including network scanning, port enumeration, password guessing, brute-forcing credentials, password spraying, and credential stuffing. Such activities are precursors to unauthorized a…
Threat ScoreMedium Risk
57
SIGNAL
Signal Score
57%
Confidence
4
Reports
First seenApr 6, 2026
Last seenApr 23, 2026
Verified IOC
GeolocationCN
CountryChina
LocationBeijing, Beijing
ASNAS137718
OrgBeijing Bitone United Networks Technology Service Co., Ltd.
Coords34.7732, 113.7220
VirusTotal
Not checked
WHOIS
- description
- IPV4 hosts detected performing scans on production environment located in Australia.
- raw
- inetnum: 14.103.0.0 - 14.103.255.255 netname: VOLCANO-ENGINE descr: Beijing Volcano Engine Technology Co., Ltd. descr: 1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing country: CN admin-c: YW7147-AP tech-c: JS4370-AP abuse-c: AC1601-AP status: ALLOCATED PORTABLE mnt-by: MAINT-CNNIC-AP mnt-lower: MAINT-CNNIC-AP mnt-routes: MAINT-CNNIC-AP mnt-irt: IRT-VOLCANO-ENGINE-CN last-modified: 2022-05-19T06:54:29Z source: APNIC irt: IRT-VOLCANO-ENGINE-CN address: 1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing admin-c: YW7147-AP tech-c: JS4370-AP e-mail: [email protected] abuse-mailbox: [email protected] auth: # Filtered mnt-by: MAINT-CNNIC-AP last-modified: 2025-12-15T06:11:55Z source: APNIC role: ABUSE CNNICCN country: ZZ address: Beijing, China phone: +000000000 e-mail: [email protected] admin-c: IP50-AP tech-c: IP50-AP nic-hdl: AC1601-AP remarks: Generated from irt object IRT-CNNIC-CN remarks: [email protected] is invalid abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-09-19T17:20:32Z source: APNIC person: Liu Nian address: 1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing country: CN phone: +86-10-13810123695 e-mail: [email protected] nic-hdl: JS4370-AP mnt-by: MAINT-CNNIC-AP last-modified: 2025-01-06T01:34:46Z source: APNIC person: Chen Qi address: 1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing country: CN phone: +86-10-13051468788 e-mail: [email protected] nic-hdl: YW7147-AP mnt-by: MAINT-CNNIC-AP last-modified: 2025-01-06T01:34:08Z source: APNIC route: 14.103.72.0/24 origin: AS137718 descr: China Internet Network Information Center Floor1, Building No.1 C/-Chinese Academy of Sciences 4, South 4th Street Haidian District, mnt-by: MAINT-CNNIC-AP last-modified: 2023-07-10T07:14:50Z source: APNIC
- references
- https://redpiranha.net
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 2 months ago · Last seen 1 month ago
Appeared in 4 threat reports