173.239.240.123📋 Copy

# IP Intelligence Briefing: 173.239.240.123/32

Date: 2026-07-28

Analyst: IPDebrief SOC Intelligence

Classification: Low Risk

---

## Executive Summary

IP address 173.239.240.123 presents a low-risk profile with a risk score of 25. The address is registered to organization NSQ-VENTURE under ASN 396356, located in Edison, New Jersey, US. The subnet shows minimal abuse density (3.57%) with 140 total sibling IPs and only 5 threat-identified neighbors. No active threat indicators or known malicious campaigns were detected.

---

## Profile Assessment

Risk Classification: Low Risk (Score: 25)

Reputation: Low Risk

Network Role: Firewalled / No Services

Open Ports: None detected

TLS/HTTP Services: Not detected

Certificate Holdings: None

Ownership Details:

• ASN: 396356
• Organization: Private Customer (NSQ-VENTURE)
• CIDR Block: 173.239.240.0/24
• Registration RIR: ARIN

---

## Geolocation Analysis

Reported Location: Edison, New Jersey, US

Geolocation Confidence: Low (Multiple sources, consensus: true)

Geo-Plausibility: FALSE

Critical Finding: Significant geolocation discrepancy detected. The IP's claimed location (New Jersey) contradicts network telemetry measurements. Round-trip time (RTT) analysis indicates the IP is approximately 6,003km from the probe location, with a minimum possible RTT of 120.1ms for that distance. Observed RTT was only 18-23ms, suggesting the geolocation data is unreliable. This violation flags the need for cautious interpretation of location-based intelligence.

---

## Threat Indicators

Active Threat Indicators: None

Known Attacker: No

Tor Exit Node: No

VPN/Proxy/Hosting: No

Blacklist Count: 0 (profile)

DNSBL Listed: 1 of 8 total lists (control plane)

Campaign Matches: 0

No active threat feeds, known campaigns, or malicious indicators were associated with this IP address.

---

## Neighborhood Assessment

Subnet: 173.239.240.0/24

Total Sibling IPs: 140

Active Siblings: 19

Threat Siblings: 5 (3.5% threat rate)

Abuse Density: 0.0357 (3.57%)

Subnet Classification: Clean

Notable Siblings:

• 173.239.240.5 (Risk: 15, Authority: 50)
• 173.239.240.18 (Risk: 40, Authority: 50)
• 173.239.240.34, 173.239.240.35, 173.239.240.36 (Risk: 25 each)

The subnet demonstrates minimal abuse characteristics with the vast majority of sibling IPs classified as low-risk.

---

## Historical Observations

Total Observations: 16

Observation Period: Recent 24-hour window

Threat Persistence Days: 0

Ownership Changes: 0

Signal History Summary:

• Consistent clean classification across recent observations
• No persistent malicious activity detected
• No ownership changes recorded
• Stable network presence with minimal behavioral anomalies

---

## Control Plane Analysis

Origin ASN: 396356

BGP Prefix: 173.239.240.0/24

Route Stability: False

RPKI State: Not validated

Route Changes (30d): 0

Delegation Age: Not available

---

## Network Behavior

Traceroute: 13 hops

Hop Count: Normal for US infrastructure

First Hop RTT: 0.5ms

Last Hop RTT: 20.1ms

Timed Out Hops: 2

Transit Networks: Comcast, Cogent

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strike: Not detected
• No mobile carrier association

---

## Security Actions & Recommendations

Recommended Actions: None

Firewall Rules: Not required at this time

Actionable Intelligence: No specific blocking or mitigation actions are recommended based on current risk assessment. The IP presents minimal threat characteristics.

Monitoring Considerations:

• Monitor for geolocation consistency
• Track subnet abuse density changes
• Watch for any emergence of threat indicators

---

## Conclusion

IP 173.239.240.123 is classified as low risk with no active malicious indicators. The primary intelligence concern is geolocation data reliability, which should be treated with skepticism. The subnet environment is clean with minimal threat density. Routine monitoring is sufficient; no immediate defensive actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.