14.191.178.125📋 Copy

# IP Intelligence Briefing: 14.191.178.125/32

## Executive Summary

Analysis of IP address 14.191.178.125/32 indicates moderate risk classification with an overall risk score of 40. The IP is assigned to Vietnam's national telecommunications infrastructure and currently operates as a firewalled endpoint with no active services.

## Network Ownership and Geolocation

The IP address belongs to ASN 45899 (IRT-VNNIC-AP) under organization VNPT-VN, a Vietnamese telecommunications provider. The network registration falls within APNIC's 14.160.0.0/11 block. Geolocation data consistently identifies the endpoint as located in Hanoi, Vietnam, with confidence level confirmed across multiple sources.

## Threat Assessment

Threat indicators returned empty across all threat feeds and reputation sources. The IP is not flagged as a known attacker, Tor exit node, spam source, or proxy service. No known campaigns were correlated with this address. DNS blacklist monitoring shows the IP is listed on 2 of 8 threat feeds, indicating historical or contextual listing without current active abuse.

## Network Classification and Services

The endpoint presents as a firewalled host with no detectable open ports, TLS certificates, or HTTP services. Network classification flags indicate the IP is not a cloud service, CDN, VPN, proxy, Tor node, hosting provider, mobile carrier, or residential address.

## DNS and Reverse Resolution

Reverse DNS resolution returns ptrHostnames: static.vnpt.vn. Forward DNS confirms the hostname static.vnpt.vn, though forward resolution remains unconfirmed. The domain vnpt.vn maintains valid SPF and DMARC email authentication records.

## Temporal Analysis

Observation history spanning 15 signal captures demonstrates stable ownership and geolocation data with no ownership changes detected. Threat persistence metrics show zero malicious activity duration, and the IP is not classified as persistently malicious.

## Neighborhood Analysis

The /24 subnet (14.191.178.0/24) exhibits zero abuse density. Two sibling IP addresses were identified: 14.191.178.84 (no scoring data) and 14.191.178.112 (risk score: 25, authority score: 50). Neither neighbor shows elevated threat characteristics.

## Recommended Security Actions

No immediate firewall rules or mitigation actions are required based on current risk profile. The IP maintains moderate risk status without active threat indicators. Routine monitoring is recommended to track potential changes in network role or threat classification.

---

Classification: Moderate Risk

Report Generated: Based on IPDebrief intelligence data

Analysis Status: Complete