14.191.4.171📋 Copy

# INTELLIGENCE BRIEFING: 14.191.4.171/32

Classification: Moderate Risk

Date: 2026-07-25

IP Address: 14.191.4.171/32

---

## EXECUTIVE SUMMARY

IP 14.191.4.171 is a Vietnamese infrastructure address operated by VNPT-VN (IRT-VNNIC-AP), assigned to the 14.160.0.0/11 CIDR block. The IP carries a moderate risk score of 40 and is listed on 2 of 8 DNSBLs. No active services, open ports, or known threat indicators were observed. The IP is associated with the hostname static.vnpt.vn and shows no evidence of active malicious campaigns or persistent threat activity.

---

## TECHNICAL PROFILE

Network Ownership & Geolocation

• Organization: VNPT-VN (IRT-VNNIC-AP)
• ASN: 45899
• Country: Vietnam (VN)
• City/Region: Hanoi
• CIDR Block: 14.160.0.0/11
• BGP Prefix: 14.191.0.0/21
• RIR: APNIC

Network Classification

• Provider: Yes (Telecommunications infrastructure)
• Cloud/CDN/Proxy: No
• Tor/VPN: No
• Mobile/Residential: No
• Services: Firewalled / No Services Detected
• Route Stability: False

DNS Analysis

• PTR Record: static.vnpt.vn
• Forward Resolution: Incomplete
• Domain: vnpt.vn
• SPF Record: Present
• DMARC Record: Present
• DNSSEC: Valid
• DNSBL Listings: 2 of 8 lists

---

## THREAT ASSESSMENT

Current Risk Indicators

• Overall Risk Score: 40 (Moderate)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 2
• Threat Feeds: None detected
• Known Campaigns: None

Control Plane Analysis

• Operator Score: 0.1304 (Minimal)
• Route Changes (30d): 0
• Is Route Stable: False
• RPKI State: Not applicable
• IRR Consistency: Not applicable

---

## OBSERVATION HISTORY

Total Observations: 15

Recent observations (July 25, 2026) indicate:

• Geolocation: Vietnam (confidence: 0.52)
• Operator Score: 0.15 (Minimal)
• Ownership Changes: 0
• Threat Persistence: 0 days
• Is Persistently Malicious: False

No evidence of escalating threat behavior or changing ownership patterns observed during the observation window.

---

## RELATIONSHIP GRAPH

Total Relationships: 10

• Network Relationships: 5 instances linked to VNPT-VN
• DNS Associations: 5 instances linked to static.vnpt.vn

No relationships detected to known malicious infrastructure or threat actors.

---

## SUBNET ANALYSIS

Subnet: 14.191.4.171/24

• Neighbor Count: 0
• Abuse Density: 0
• Classification: Not applicable
• Threat Siblings: 0

No neighboring IPs with known malicious activity detected in the immediate subnet.

---

## RECOMMENDED ACTIONS

Firewall Blocking Rules

iptables:

```bash

iptables -A INPUT -s 14.191.4.171 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 14.191.4.171 drop

```

nginx:

```nginx

deny 14.191.4.171;

```

pfSense:

```

14.191.4.171/32

```

Cloudflare WAF:

```json

{

"description": "Block 14.191.4.171 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 14.191.4.171"

}

}

```

AWS WAF:

```json

{

"Addresses": ["14.191.4.171/32"],

"Description": "IPDebrief risk 40"

}

```

---

## ANALYST NOTES

The IP address 14.191.4.171 represents standard Vietnamese telecommunications infrastructure from VNPT. The moderate risk score (40) is primarily driven by DNSBL listings rather than active threat indicators. No open services or port scans were detected. The route stability flag being false indicates potential BGP routing changes, but no actual route changes were observed in the last 30 days.

SOC Recommendations:

1. Monitor traffic patterns for this IP as part of routine Vietnamese ISP traffic analysis

2. Current risk level does not warrant immediate blocking unless additional threat indicators emerge

3. Consider implementing rate limiting rather than hard blocking if traffic is observed

4. No immediate threat action required based on current data

---

*Intelligence generated using IPDebrief tools. Data is current as of observation timestamp.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.