173.239.218.72📋 Copy

# IP Intelligence Briefing: 173.239.218.72/32

## Executive Summary

IP address 173.239.218.72 presents a low-risk profile with a risk score of 25. The address belongs to LOGICWEB network under ASN 62240 (Private Customer) and is geolocated to Los Angeles, California, United States. No active threat indicators, open services, or malicious behaviors were observed.

## Technical Profile

Ownership & Classification:

• ASN: 62240 (Private Customer)
• Organization: LOGICWEB
• CIDR Block: 173.239.218.0/24
• RIR: ARIN
• Network Classification: Firewalled / No Services

Geolocation:

• Country: United States (US)
• State: California
• City: Los Angeles
• Accuracy Radius: 2500 km
• GeoValidation: Consensus enabled (geoConsensus: true)

Network Services:

• Open Ports: None detected
• DNS Records: No PTR hostnames, no forward resolution
• TLS/HTTP: No certificates, titles, or server banners
• Email Authentication: No SPF, DMARC, or TXT records

## Threat Assessment

Threat Indicators:

• Threat Score: 25 (Low Risk)
• Abuse Confidence Score: None
• Known Campaigns: None
• Blacklist Status: Not listed on any feeds
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Auto-Banned: No

Control Plane:

• Origin ASN: 62240
• BGP Prefix: 173.239.218.0/24
• DNSSEC Valid: Yes
• Route Stability: Not stable
• Operator Score: 0.1304 (Minimal)

## Historical Observations

Twelve observations were recorded for this IP. Recent signals indicate consistent geolocation data from multiple sources (Cymru, MaxMind) with confidence levels ranging from 0.30 to 0.95. ASN registration data from ARIN was confirmed. No escalation in threat signals or reputation degradation was observed over the observation period.

## Neighborhood Analysis

Subnet Context: 173.239.218.0/24

• Total Siblings: 100 IPs
• Abuse Density: 0
• Risk Distribution: 0 high-risk, 2 medium-risk, 98 low-risk

Notable neighbors within the same /24 block include:

• 173.239.218.2 (Risk: 0)
• 173.239.218.5 (Risk: 0)
• 173.239.218.12 (Risk: 0)
• 173.239.218.23 (Risk: 25)
• 173.239.218.25 (Risk: 20)

## Relationships

Two relationships identified:

• Same Network: LOGICWEB (appears twice in relationship graph)

## Recommended Actions

Based on the low-risk profile and absence of malicious indicators, the following actions are recommended:

Firewall/Perimeter Rules:

• Monitor inbound traffic from 173.239.218.0/24
• No immediate block required
• Log all connection attempts for 30-day observation window

Monitoring Parameters:

• Track for emergence of open ports or service activity
• Monitor for reputation score changes
• Watch for new blacklist additions

Classification:

• Current Status: LOW RISK
• Action: Allow with monitoring
• Review Frequency: Quarterly

Note: The IP address shows no evidence of malicious activity. The subnet maintains low abuse density, and the majority of sibling IPs present low-to-zero risk profiles.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.