14.191.42.191📋 Copy

## IP INTELLIGENCE BRIEFING: 14.191.42.191/32

Classification: Moderate Risk Infrastructure Node

Date: 2026-07-27

Prepared For: SOC Operations

---

EXECUTIVE SUMMARY

IP 14.191.42.191 is a firewalled infrastructure address located in Haiphong, Vietnam. Risk assessment scores indicate moderate concern (40/100) with no active threat indicators. The IP is associated with VNPT (Vietnam Posts and Telecommunications) and the IRT-VNNIC-AP organization. Two DNSBL listings detected; otherwise clean.

---

INFRASTRUCTURE PROFILE

Geolocation:

• Country: Vietnam (VN)
• Region/City: Haiphong
• Coordinates: 20.8567°N, 106.6826°E
• Timezone: Asia/Ho_Chi_Minh

Network Registration:

• ASN: 45899
• BGP Prefix: 14.191.40.0/21
• RIR: APNIC
• Organization: IRT-VNNIC-AP
• Abuse Contact: hm-changed@vnnic.vn

DNS Resolution:

• PTR Record: static.vnpt.vn
• Forward Resolution: static.vnpt.vn
• SPF Record: Present (configured)
• DMARC Record: Present (configured)
• DNSBL Listings: 2 of 8 total lists (low severity)

---

THREAT ASSESSMENT

Risk Score: 40/100 (Moderate)

Threat Indicators: None detected

• Not a Tor exit node
• Not flagged as known attacker
• Not a spam source
• Blacklist count: 0
• No active campaigns identified

Network Behavior:

• Service Purpose: Firewalled / No Services
• Open Ports: None observed
• TLS Certificates: None
• HTTP Services: None detected

Control Plane:

• Route Stability: False (route changes in 30-day window)
• DNSSEC: Valid
• IRR Consistency: Unknown
• Operator Score: 0.1304 (Minimal)

---

NEIGHBORHOOD ANALYSIS

Subnet: 14.191.42.0/24

• Abuse Density: 0 (clean classification)
• Total Siblings: 4
• Active Siblings: 1
• Threat Siblings: 0

Sibling IP Risk Distribution:

Assessment: Subnet exhibits low abuse density. The target IP shares characteristics with two medium-risk siblings (40/100 scores) and one low-risk sibling (15/100). No high-risk neighbors detected.

---

HISTORICAL OBSERVATIONS

Observation Count: 13 signals tracked

Recent Signal Timeline (2026-07-27):

• 02:02:05 UTC: RIR registration (APNIC), Organization (IRT-VNNIC-AP), Abuse contact registered
• 02:01:16 UTC: Subnet classification (clean), Inherited risk: 0
• 02:00:41 UTC: Geolocation confirmed (Haiphong, Vietnam)
• 01:59:53 UTC: Operator score assessed as Minimal (0.1304)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: False

---

RELATIONSHIP MAPPING

DNS Associations:

• static.vnpt.vn (recorded twice in relationship graph)

No certificate, hostname, or organizational relationships detected beyond DNS associations.

---

RECOMMENDED ACTIONS

Firewall/Ingress Rules:

• No immediate blocking required based on current risk profile
• Monitor for service activation (currently firewalled/no services)
• DNSBL listings may warrant periodic review

SOC Monitoring:

• Track subnet for emergence of active threat indicators
• Monitor for service changes (currently no open ports)
• Review DNSBL listing specifics if false positive concerns arise

Risk Mitigation:

• Subnet abuse density is 0; no inherited threat risk
• Two medium-risk siblings (14.191.42.13, 14.191.42.22) should be monitored
• Low-risk sibling (14.191.42.56) indicates subnet is not systematically compromised

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.