14.191.24.70📋 Copy

# IP Intelligence Briefing: 14.191.24.70/32

Date: 2026-07-24

Classification: Low Risk / Defensive Security Assessment

## Executive Summary

IP address 14.191.24.70 is registered to Vietnam Post and Telecom (VNPT-VN), a Tier-1 ISP operating under ASN 45899. The IP demonstrates a low-risk profile (Risk Score: 25) with no active threat indicators, no known malicious campaigns, and no service exposure. The subnet shows clean abuse density with no neighboring IPs flagged for malicious activity.

---

## Ownership and Infrastructure

The IP is part of the 14.191.24.0/21 BGP prefix controlled by VNPT-VN. The control plane shows the prefix is not route-stable, though this may reflect normal operational routing changes rather than malicious activity.

---

## Risk Assessment

Key Observations:

• No open ports detected; service banner indicates "Firewalled / No Services"
• No TLS certificates, HTTP banners, or service fingerprints observed
• No known threat indicators or campaign affiliations
• Geographic signals consistently point to Vietnam with 600km accuracy radius

---

## Neighborhood Analysis

The /24 subnet (14.191.24.0/24) contains 5 total siblings with 0 active threats.

Subnet Classification: Clean

Abuse Density: 0%

Inherited Risk: 0

No sibling IPs have risk scores or abuse indicators, suggesting this subnet is operated as a standard ISP infrastructure block without malicious activity.

---

## Historical Observation Timeline

Fifteen signals have been observed, with the most recent activity on 2026-07-24.

Recent Signals:

• Geolocation: Vietnam, Hanoi (confidence: 0.70)
• Ownership: No changes recorded (confidence: 0.85)
• Network Role: Provider infrastructure, no CDN/proxy/VPN characteristics

No temporal trends indicating escalating risk or emerging threat patterns. The IP has demonstrated persistent benign behavior over the observation period.

---

## Related Entities

Three relationships detected, all classified as "Same Network" with target value "VNPT-VN." No external hostname associations, certificates, or organizational relationships beyond the ISP network block.

---

## Recommended Actions

Current Status: No immediate defensive actions required.

Rationale: The low-risk profile (25), absence of threat indicators, and clean neighborhood environment support continued monitoring rather than blocking. The IP does not meet thresholds for firewall rules or WAF policy changes.

Monitoring Recommendations:

• Maintain passive observation for emerging threat indicators
• Monitor for service exposure changes (currently no open ports)
• Track DNSBL listings (1 current listing)

---

## Conclusion

IP 14.191.24.70 represents standard ISP infrastructure from Vietnam's VNPT network with no active threat indicators. The low risk score, clean subnet, and lack of malicious activity patterns support classification as benign infrastructure. No immediate mitigation required; continue routine monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.