173.239.214.151📋 Copy

# IP Intelligence Briefing: 173.239.214.151/32

Classification: Low Risk (Score: 20/100)

Date: Current Analysis

Target: 173.239.214.151

## Executive Summary

The IP address 173.239.214.151 belongs to LOGICWEB (Private Customer) under ASN 62240, registered in Edison, New Jersey. The IP presents a low-risk profile with no active threat indicators. The address is firewalled with no open services detected, suggesting either legitimate infrastructure or a decommissioned resource. No actionable threats were identified during this assessment.

## Network Profile

## Threat Assessment

Active Threat Indicators: None

• No known attacker reputation
• No spam source classification
• No Tor exit node designation
• Zero blacklist entries
• No known campaign associations
• No threat feeds matched

Service Exposure: None

• No open ports detected
• No TLS certificates found
• No HTTP services running
• No email authentication records (SPF/DMARC)

## Neighborhood Analysis (173.239.214.0/24)

The /24 subnet shows minimal abuse activity. Of 100 sampled neighbors, 85% scored low risk and 15% scored medium risk. No high-risk neighbors were detected. The target IP shares the same network with 15 threat-identified siblings, though these are not directly correlated.

## Observations & History

Signal Count: 13 observations recorded

Persistence: No persistent malicious activity detected

Ownership Stability: No ownership changes observed

Recent signal observations indicate:

• Consistent low-risk behavior across multiple probes
• No service enumeration strikes
• No honeypot hits
• No WAF violations

## Geolocation Validation

Status: ⚠️ Anomaly Detected

• Claimed Location: Edison, NJ, US
• Distance: 6,008 km from probe location
• Observed RTT: 19ms
• Minimum Possible RTT: 120.2ms
• Validation: Failed (RTT 19ms < minimum possible 120.2ms)

*Note: The geolocation data indicates a plausible location mismatch, suggesting either proxying, misconfiguration, or inaccurate RIR registration.*

## Relationship Graph

All identified relationships (5 total) point to LOGICWEB network assets. No external entity relationships (hostnames, organizations, certificates) were discovered, indicating isolated network operation.

## Recommended Actions

Firewall Rules: None required at this time.

## Intelligence Narrative

IP 173.239.214.151 is classified as low-risk infrastructure operated by LOGICWEB. The absence of open services and threat indicators suggests the IP is either properly secured legitimate infrastructure or has been taken offline. The geolocation validation anomaly warrants periodic re-assessment but does not indicate active malicious activity. The subnet environment (173.239.214.0/24) demonstrates minimal abuse density with 15 threat siblings out of 148 total addresses, placing the target in a relatively clean neighborhood.

Confidence Level: High (Low-risk classification supported by multiple data sources)

Action Required: None at this time. Continue standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.