14.139.114.194📋 Copy

# Intelligence Briefing: 14.139.114.194/32

Classification: MODERATE RISK

Date Generated: July 28, 2026

Analyst: IPDebrief SOC Intelligence

---

## Executive Summary

IP address 14.139.114.194 was analyzed and classified as MODERATE RISK with a risk score of 55. The IP is assigned to ASN 55824, organization "Sh Antosh Dyade" (NetName: NKN-DAE-MUM) under APNIC RIR registration. Geolocation data indicates location in Gujarat, India (Gandhinagar), though geolocation confidence was flagged as implausible. No active threat indicators were detected, but the IP appears on 3 DNSBL lists and exhibits route instability.

---

## Network Profile & Ownership

Ownership:

• ASN: 55824
• Organization: Sh Antosh Dyade
• Network: NKN-DAE-MUM
• CIDR Block: 14.139.114.192/28
• RIR: APNIC

Geolocation:

• Country: India (IN)
• Region: Gujarat
• City: Gandhinagar
• Note: Geolocation confidence flagged as implausible

Network Role:

• Classification: Firewalled / No Services
• No open ports detected
• No TLS certificates
• No HTTP services

---

## Threat Indicators

Assessment: No active threat indicators detected.

Threat Feed Data:

• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Pulsedive Risk: Not available
• Known Campaigns: None

Control Plane:

• Route Stability: False (not route stable)
• Route Changes (30d): 0
• DNSBL Listed: 3 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• DNSSEC Valid: Yes

---

## Neighborhood Analysis

Subnet: 14.139.114.194/24

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Count: 0

No neighboring IPs in the /24 subnet showed elevated risk indicators.

---

## Observation History

Total Observations: 12

Recent Activity: July 28, 2026

Key historical signals include:

• Geolocation signals showing location inconsistencies
• Ownership records confirming Sh Antosh Dyade association
• Operator scoring rated as "Minimal"
• No persistent malicious behavior observed

---

## Recommended Actions

Firewall Rules: No specific firewall recommendations generated due to moderate risk classification and lack of active threat indicators.

Monitoring Recommendations:

1. Monitor DNSBL status changes (currently listed on 3 of 8 lists)

2. Track route stability (currently flagged as not stable)

3. Continue monitoring for service openings on the previously firewalled endpoint

4. Watch for any correlation with known campaigns or associated IPs

---

## Conclusion

IP 14.139.114.194 presents MODERATE RISK primarily due to DNSBL listings and route instability, despite no active threat indicators. The IP is part of a clean neighborhood with no threat siblings. SOC teams should monitor for service activation and DNSBL status changes, but immediate blocking is not warranted based on current intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.