14.191.232.117
# IP Intelligence Briefing: 14.191.232.117/32
## Executive Summary
IP 14.191.232.117 is a Vietnamese network infrastructure endpoint belonging to VNPT-VN (ASN 45899, IRT-VNNIC-AP). The IP carries a moderate risk score of 40 and is classified under the provider network 14.160.0.0/11. No active threat indicators or known attack campaigns were identified. The IP is associated with the hostname static.vnpt.vn and shows stable ownership attributes within the APNIC RIR region.
## Technical Profile
- IP Address: 14.191.232.117
- Risk Score: 40 (Moderate Risk)
- ASN: 45899 (IRT-VNNIC-AP)
- Organization: VNPT-VN
- Country: Vietnam (VN)
- Geolocation: Tỉnh Giang, Mì Tho (±600km accuracy)
- CIDR Block: 14.160.0.0/11
- Service Status: Firewalled / No Services Detected
- DNS PTR: static.vnpt.vn
- Forward Resolution: static.vnpt.vn (unconfirmed)
## Threat Assessment
No active threat indicators were observed. The IP is not classified as a Tor exit node, known attacker, or spam source. Blacklist status shows 0 direct blacklist hits. The control plane indicates the IP is part of the 14.191.224.0/20 BGP prefix with 0 route changes in the past 30 days, though route stability is flagged as false. DNSBL listings show 2 hits across 8 total lists, suggesting some historical reputation concerns.
## Historical Observation
Observation history contains 13 recorded signals, primarily focused on RIR registration and geolocation data observed between 2026-07-23. Geolocation signals show Vietnamese positioning from multiple sources (MaxMind GeoLite2, Cymru). No temporal escalation in malicious activity was detected.
## Relationship Analysis
- Network Association: VNPT-VN
- DNS Associations: static.vnpt.vn (two records)
- No certificate or organizational relationships detected beyond DNS and network associations.
## Neighborhood Context
The /24 subnet 14.191.232.0/24 contains 3 sibling IPs with an abuse density of 0. One neighbor (14.191.232.106) exhibits elevated risk (score 70) with authority score 50. This suggests localized neighborhood risk that warrants monitoring.
## Recommended Security Actions
Due to the moderate risk profile (40) and DNSBL listings, the following defensive measures are recommended:
Firewall Rules:
```bash
# iptables
iptables -A INPUT -s 14.191.232.117 -j DROP
# nftables
nft add rule inet filter input ip saddr 14.191.232.117 drop
```
WAF/CDN Configuration:
- Cloudflare WAF: Block 14.191.232.117 (expression: ip.src eq 14.191.232.117)
- AWS WAF: Add 14.191.232.117/32 to blocked addresses
Notes:
- The IP is part of a legitimate Vietnamese ISP infrastructure (VNPT)
- Block recommendation is probabilistic and should be combined with other signals
- Monitor the neighborhood IP 14.191.232.106 (risk score 70) for correlated activity
## Conclusion
IP 14.191.232.117 represents a moderately risky endpoint within a legitimate Vietnamese provider network. While no active exploitation indicators were detected, the moderate risk score combined with DNSBL listings and neighborhood risk context (neighbor 14.191.232.106 showing elevated risk) justify defensive blocking. Recommend continued monitoring for activity patterns and correlation with the higher-risk neighbor IP.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VNNIC-AP |
| ASN | AS45899 |
| Network Name | VNPT-VN |
| CIDR Block | 14.160.0.0/11 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.vnpt.vn |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | static.vnpt.vn |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS45899 |
| Network Prefix | 14.191.224.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 05:34:49 UTC |
| Last Seen | 2026-10-05 01:42:37 UTC |
| Profile Built | 2026-10-05 01:42:49 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 14.191.232.117
Who owns the IP address 14.191.232.117?
14.191.232.117 is registered to IRT-VNNIC-AP. The address falls within the 14.160.0.0/11 network block. Registration is held at APNIC.
Where is 14.191.232.117 located?
Geolocation data places 14.191.232.117 in Mỹ Tho, Tiền Giang, Vietnam. The local time zone is Asia/Ho_Chi_Minh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 14.191.232.117 malicious or safe?
14.191.232.117 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 14.191.232.117?
The reverse DNS (PTR) record for 14.191.232.117 is static.vnpt.vn. This hostname is not forward-confirmed, so it should be treated as a weak signal.