14.191.192.191📋 Copy

## IPDebrief Intelligence Briefing

Subject: 14.191.192.191/32

Classification: Low Risk Infrastructure IP

Date: 2026-07-28

Analyst: Automated Intelligence System

EXECUTIVE SUMMARY

The target IP 14.191.192.191 is classified as a Low Risk (Score: 25) infrastructure address belonging to Vietnam's state telecommunications provider VNPT. The IP exhibits stable ownership characteristics with no persistent malicious activity detected. Current operational status shows firewalled configuration with no active services, consistent with legitimate network infrastructure or reserved addressing.

---

OWNERSHIP & NETWORK ATTRIBUTES

Network Role: Provider/Infrastructure

Cloud Status: Not cloud-based

CDN/Proxy Status: None detected

---

THREAT INTELLIGENCE

Risk Score: 25/100 (Low)

Threat Indicators: None detected

Blacklist Count: 0 active lists

Known Campaigns: None

Threat Feed Analysis:

• No Tor exit node activity
• No known attacker signatures
• No spam source indicators
• Abuse confidence score: Not applicable (infrastructure IP)

DNSBL Status: Minimal listing on 1 of 8 major feeds (operatorScore: 0.1304)

---

NETWORK BEHAVIOR & SERVICES

Service Status: Firewalled / No Services

Open Ports: None detected

TLS Certificates: None

HTTP Banner: None

Behavioral Indicators:

• Honeypot hits: 0
• No anomalous behavioral patterns observed

DNS Resolution:

• PTR Hostname: static.vnpt.vn
• Forward resolution confirmed: No
• Hosted domains: 0
• Email authentication: SPF and DMARC configured

---

OBSERVATION HISTORY (19 Signals)

Temporal Analysis:

• Total Observations: 19
• Most Recent: 2026-07-28T12:20:49
• Threat Persistence Days: 0
• Is Persistently Malicious: False

Signal Breakdown:

• Geolocation: Consistent Vietnam attribution (multi-signal inference)
• Network Classification: Stable infrastructure classification
• Subnet Analysis: Consistent clean classification across observations

Validation Status: ICMP validation blocked; geo-validation plausible with 600km accuracy radius

---

RELATIONSHIP GRAPH (9 Entities)

Primary Associations:

1. Network (4x): VNPT-VN

2. DNS Hostname (5x): static.vnpt.vn

Relationship Type Distribution:

• Same Network: 4
• DNS Association: 5

No organizational, certificate, or campaign-level relationships detected.

---

NEIGHBORHOOD ANALYSIS

Subnet: 14.191.192.0/24

Abuse Density: 0% (Clean)

Total Siblings: 3

Active Siblings: 2

Neighbor Risk Distribution:

Threat Siblings: 0

Inherited Risk: 0

---

CONTROL PLANE DATA

• Origin ASN: 45899
• BGP Prefix: 14.191.192.0/20
• Route Stability: Not stable (route changes observed)
• RPKI State: Not validated
• IRR Consistency: Not validated
• Route Changes (30d): 0
• DNSSEC: Valid
• CAA Records: None
• MoAS Status: False

---

RECOMMENDATIONS FOR SOC ANALYSTS

1. Classification: This IP represents legitimate telecommunications infrastructure. No immediate blocking required.

2. Allow List Consideration: If this IP appears in threat logs, it should be evaluated as a legitimate service provider address rather than a threat actor.

3. Monitoring: No additional monitoring required beyond standard infrastructure IP tracking.

4. Firewall Rules: If traffic from this IP is observed, standard provider IP allow policies apply. No specific deny rules recommended.

---

CONCLUSION

IP 14.191.192.191 is a low-risk infrastructure address from Vietnam's VNPT telecommunications network. The IP shows no malicious indicators, no active services, and stable ownership characteristics. Intelligence suggests this address is part of legitimate network infrastructure and should be treated accordingly in threat detection and response workflows.

Status: CLEAR FOR OPERATIONS

Confidence: High (based on 19 historical observations)

Last Updated: 2026-07-28

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.