# 173.239.240.123 — IP Intelligence Summary 173.239.240.123 is an IPv4 address operated by Private Customer (AS396356), geolocated to Edison, United States. As of October 24, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/173.239.240.123 - Last updated: 2026-10-24 ## Ownership - Organization: Private Customer - Network name: NSQ-VENTURE - Allocated block: 173.239.240.0/24 - ASN: AS396356 (https://ipdebrief.com/asn/396356) - Regional registry: ARIN ## Location - City: Edison - Region: New Jersey - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 173.239.240.123/32 **Date:** 2026-07-28 **Analyst:** IPDebrief SOC Intelligence **Classification:** Low Risk \--- \## Executive Summary IP address 173.239.240.123 presents a low-risk profile with a risk score of 25. The address is registered to organization NSQ-VENTURE under ASN 396356, located in Edison, New Jersey, US. The subnet shows minimal abuse density (3.57%) with 140 total sibling IPs and only 5 threat-identified neighbors. No active threat indicators or known malicious campaigns were detected. \--- \## Profile Assessment **Risk Classification:** Low Risk (Score: 25) **Reputation:** Low Risk **Network Role:** Firewalled / No Services **Open Ports:** None detected **TLS/HTTP Services:** Not detected **Certificate Holdings:** None **Ownership Details:** \- **ASN:** 396356 \- **Organization:** Private Customer (NSQ-VENTURE) \- **CIDR Block:** 173.239.240.0/24 \- **Registration RIR:** ARIN \--- \## Geolocation Analysis **Reported Location:** Edison, New Jersey, US **Geolocation Confidence:** Low (Multiple sources, consensus: true) **Geo-Plausibility:** FALSE **Critical Finding:** Significant geolocation discrepancy detected. The IP's claimed location (New Jersey) contradicts network telemetry measurements. Round-trip time (RTT) analysis indicates the IP is approximately 6,003km from the probe location, with a minimum possible RTT of 120.1ms for that distance. Observed RTT was only 18-23ms, suggesting the geolocation data is unreliable. This violation flags the need for cautious interpretation of location-based intelligence. \--- \## Threat Indicators **Active Threat Indicators:** None **Known Attacker:** No **Tor Exit Node:** No **VPN/Proxy/Hosting:** No **Blacklist Count:** 0 (profile) **DNSBL Listed:** 1 of 8 total lists (control plane) **Campaign Matches:** 0 No active threat feeds, known campaigns, or malicious indicators were associated with this IP address. \--- \## Neighborhood Assessment **Subnet:** 173.239.240.0/24 **Total Sibling IPs:** 140 **Active Siblings:** 19 **Threat Siblings:** 5 (3.5% threat rate) **Abuse Density:** 0.0357 (3.57%) **Subnet Classification:** Clean **Notable Siblings:** \- 173.239.240.5 (Risk: 15, Authority: 50) \- 173.239.240.18 (Risk: 40, Authority: 50) \- 173.239.240.34, 173.239.240.35, 173.239.240.36 (Risk: 25 each) The subnet demonstrates minimal abuse characteristics with the vast majority of sibling IPs classified as low-risk. \--- \## Historical Observations **Total Observations:** 16 **Observation Period:** Recent 24-hour window **Threat Persistence Days:** 0 **Ownership Changes:** 0 **Signal History Summary:** \- Consistent clean classification across recent observations \- No persistent malicious activity detected \- No ownership changes recorded \- Stable network presence with minimal behavioral anomalies \--- \## Control Plane Analysis **Origin ASN:** 396356 **BGP Prefix:** 173.239.240.0/24 **Route Stability:** False **RPKI State:** Not validated **Route Changes (30d):** 0 **Delegation Age:** Not available \--- \## Network Behavior **Traceroute:** 13 hops **Hop Count:** Normal for US infrastructure **First Hop RTT:** 0.5ms **Last Hop RTT:** 20.1ms **Timed Out Hops:** 2 **Transit Networks:** Comcast, Cogent **Behavioral Indicators:** \- Honeypot Hits: 0 \- Enumeration Strike: Not detected \- No mobile carrier association \--- \## Security Actions & Recommendations **Recommended Actions:** None **Firewall Rules:** Not required at this time **Actionable Intelligence:** No specific blocking or mitigation actions are recommended based on current risk assessment. The IP presents minimal threat characteristics. **Monitoring Considerations:** \- Monitor for geolocation consistency \- Track subnet abuse density changes \- Watch for any emergence of threat indicators \--- \## Conclusion IP 173.239.240.123 is classified as low risk with no active malicious indicators. The primary intelligence concern is geolocation data reliability, which should be treated with skepticism. The subnet environment is clean with minimal threat density. Routine monitoring is sufficient; no immediate defensive actions are warranted. ## Nearby addresses - 173.239.240.5 (https://ipdebrief.com/173.239.240.5) - 173.239.240.6 (https://ipdebrief.com/173.239.240.6) - 173.239.240.9 (https://ipdebrief.com/173.239.240.9) - 173.239.240.15 (https://ipdebrief.com/173.239.240.15) - 173.239.240.18 (https://ipdebrief.com/173.239.240.18) - 173.239.240.24 (https://ipdebrief.com/173.239.240.24) - 173.239.240.27 (https://ipdebrief.com/173.239.240.27) - 173.239.240.34 (https://ipdebrief.com/173.239.240.34) - 173.239.240.35 (https://ipdebrief.com/173.239.240.35) - 173.239.240.36 (https://ipdebrief.com/173.239.240.36) - 173.239.240.37 (https://ipdebrief.com/173.239.240.37) - 173.239.240.38 (https://ipdebrief.com/173.239.240.38) --- Source: IPDebrief, "173.239.240.123 IP intelligence", https://ipdebrief.com/173.239.240.123, updated 2026-10-24. Assessments are probabilistic.