173.239.214.154📋 Copy

# IP Intelligence Briefing: 173.239.214.154

## Executive Summary

IP 173.239.214.154 presents as a low-risk infrastructure address with no active threat indicators. The IP is classified as "Firewalled / No Services" with a risk score of 25/100 and zero threat indicators.

## Network Ownership & Geolocation

• ASN: 62240
• Organization: Private Customer (LOGICWEB)
• Registry: ARIN
• Location: Edison, New Jersey, United States
• CIDR Block: 173.239.214.0/24
• Registration: Private customer assignment

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Blacklist Status: Not listed on any major threat feeds
• DNSBL Listings: 1 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: No known campaigns

## Network Behavior & Services

• Open Ports: None detected
• Services: Firewalled / No Services
• Infrastructure Type: Private customer network
• Network Classification: Not CDN, not VPN, not hosting, not proxy
• HTTP Services: None responding

## Neighborhood Analysis (173.239.214.0/24)

• Total Subnet Siblings: 148 IPs
• Active Siblings: 89
• Abuse Density: 10.14%
• Classification: Mostly clean
• Risk Distribution:

- High Risk: 0

- Medium Risk: 15

- Low Risk: 80

• Inherited Risk Score: 4

## Relationship Graph

• Primary Association: Same network (LOGICWEB)
• Related Entities: No additional organizational or certificate relationships identified

## Observation History

Nine signal observations recorded with the most recent activity on 2026-07-30. Historical signals indicate:

• Consistent ownership and geolocation data
• Stable ASN and RIR registration
• No significant changes in network role or threat classification
• No evidence of malicious persistence behavior

## Control Plane Analysis

• Route Stability: Unstable (false)
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 173.239.214.0/24

## Recommended Actions

Based on the low-risk profile and absence of threat indicators:

1. Allow Traffic: No blocking required for general traffic

2. Monitoring: Standard monitoring practices apply

3. Firewall Rules: No specific firewall rules recommended

4. Threat Intelligence: No additional indicators to ingest

## SOC Analyst Notes

This IP represents a private customer network with no observable malicious activity. The subnet shows minimal abuse density (10.14%) with 15 potentially concerning IPs among 148 total siblings. The target IP itself has no open services, no threat indicators, and no association with known campaigns. Treat as benign infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.