14.191.160.35📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Subject: 14.191.160.35/32

Classification: Moderate Risk (Score: 40)

Date: 2026-07-23

Analyst: IPDebrief Intelligence Platform

---

## EXECUTIVE SUMMARY

IP address 14.191.160.35 is a Vietnamese infrastructure endpoint assigned to Vietnam Posts and Telephones Corporation (VNPT-VN). The IP presents moderate risk (score 40) with no active threat indicators, no open services, and a clean subnet classification. While the IP is not actively malicious, defensive blocking is recommended based on the moderate risk profile.

---

## OWNERSHIP AND GEOLOCATION

• ASN: 45899 (IRT-VNNIC-AP)
• Organization: VNPT-VN (VNPT)
• Network Block: 14.160.0.0/11
• RIR: APNIC
• Location: Hanoi, Vietnam (VN)
• Timezone: Asia/Ho_Chi_Minh
• Geolocation Confidence: Plausible with 600km accuracy radius

---

## THREAT INDICATORS

Threat Assessment: No active threat indicators detected. IP is not associated with known malicious campaigns, spam infrastructure, or proxy services.

---

## NETWORK CLASSIFICATION

• Role: Firewalled / No Services
• Infrastructure Type: Not Cloud, CDN, VPN, Proxy, or Hosting
• Connection Type: Not Mobile or Residential
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None

Behavioral Analysis: The IP presents as a static infrastructure endpoint with no open services or active network footprints.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 14.191.160.0/24

Abuse Density: 0 (Clean)

Total Siblings: 4

Active Threat Siblings: 0

Assessment: The /24 subnet shows minimal abuse activity with only one low-risk neighbor (14.191.160.169). The target IP's classification is "clean" with inherited risk of 0.

---

## OBSERVATION HISTORY

Total Observations: 16

Recent Trend: Stable/Consistent

Key Historical Signals:

• 2026-07-23 16:22: Subnet classified as "clean" with 0 abuse density
• 2026-07-23 16:21: Network role confirmed as non-proxy, non-mobile, non-cloud infrastructure
• 2026-07-23 16:17: Organization registered under IRT-VNNIC-AP (APNIC)
• Ownership Changes: 0 (Stable)
• Threat Persistence: 0 days (No persistent malicious activity)

Temporal Analysis: IP shows stable ownership and no evidence of persistent malicious behavior over the observation window.

---

## DNS INFRASTRUCTURE

• PTR Hostname: static.vnpt.vn
• Forward Resolution: static.vnpt.vn
• DNSSEC Valid: Yes
• Email Auth: SPF and DMARC records present
• Hosted Domains: 0

---

## RELATIONSHIP GRAPH

• Network Associations: VNPT-VN (multiple entries)
• DNS Associations: static.vnpt.vn (multiple entries)
• Total Relationships: 7

---

## RECOMMENDED ACTIONS

Risk-Based Recommendation: Block (Score 40 indicates moderate risk)

Firewall Rules by Platform:

• iptables: `iptables -A INPUT -s 14.191.160.35 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 14.191.160.35 drop`
• nginx: `deny 14.191.160.35;`
• pfSense: `14.191.160.35/32`
• Cloudflare WAF: Block with expression `ip.src eq 14.191.160.35`
• AWS WAF: `Addresses: ["14.191.160.35/32"]`

Assessment: While the IP shows no active malicious indicators, the moderate risk score (40) warrants blocking. The decision should be combined with additional contextual signals before enforcement.

---

## INTELLIGENCE CONCLUSION

14.191.160.35 is a Vietnamese infrastructure IP assigned to VNPT-VN with no active threat indicators. The subnet is clean, and the IP shows stable ownership with no historical malicious activity. The moderate risk score (40) without active threat indicators suggests defensive blocking is a prudent measure. Monitor for any changes in behavior or risk profile over time.

Priority: Low-Medium

Action: Recommended Block with Monitoring

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.